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WEB SERVICES ORGANIZATION 
GETS DOWN TO BUSINESS 

WS-I working groups tackle interoperability 

large 



BY CHRISTINA M. PURPI 

The Web Services Interoper- 
ability Organization, a vendor 
consortium also known as the 
WS-I, last month announced 
the creation of three new work- 
ing groups as it takes the lead 
in testing and certification of 
Web services. 

According toJoeMcGonnell, 
product manager for Web ser- 
vices operation at Hewlett- 
Packard Co. and H P's represen- 
tative on the WS-I marketing 
committee, the interoperability 
issue is one "that needs to be 
solved before Web services 
become real in the marketplace. 
Interoperability has to be 
worked out before large enter- 



prises begin deploying 
scale Web services." 

In a nutshell, the objectives 
of these working groups are to 
"tell you what you need to do, 
show you examples of how to do 
it, and provide you with the 
tools to make sure you're doing 
it correctly," said McGonnell. 
I n addition, he expects that the 
"WS-I will, over time, make 
recommendations to various 
standards bodies if any interop- 
erability issues are uncovered in 
the various core Web services 
industry standards." 

Of the three groups, the Test 
Materials and Tools Develop- 
ment Working Group, has as its 

► continued on page 10 



Sun Drops JDO 
From Sun ONE 
Studio, for Now 



BY EDWARD J. CORREIA 

Sun Microsystems Inc. has 
dropped its implementation of 
the Java Data Objects specifica- 
tion from its Sun ONE Studio 4, 
formerly called Forte for Java 4, 
and has not announced concrete 
plans to replace it, leaving many 
of its developers in the lurch. 

Sun informed the developers 
on the Forte for Java mailing list 
via e-mail, in late April, and 
when one recipient posted the 
message to a reader forum on 
the forte.sun.com site, many 
questions and comments flew. 
"I'm very surprised to see that 
this has been dropped 
without even mention- 
ing it in the release 
notes," wrote M ark 
Shead. "What is Sun 
going to do with this 
technology? How is it 
going to be made avail- 
able?" wrote Philip 
Smith. At press time, 
none of the many 
questions had received 
a response from Sun. 

The JDO specifica- 




... . 

Object-relational 
mapping is a small 
part of JDO, says 
Sun's Russell. 



tion is intended to give develop- 
ers a transparent way to persist 
their Java objects in a database 
without the need to know or use 
that database's query language. 
Sun had delivered a preview 
reference implementation with 
F orte for J ava 3.0 based on J SR- 
12, the precursor to JDO 1.0. 

Craig Russell, an architect 
with Sun who also served as the 
Java Community Process' speci- 
fication lead for JDO, said that 
dropping the implementation 
from Forte was logical for two 
reasons. "The Forte tools team 
is in the business of providing 
tools; they are not 
responsible for the 
runtime behavior of 
code. It's a mismatch 
to have the Forte divi- 
sion writing code that 
runs and does data- 
base mapping," a func- 
tion that he said con- 
tains mostly runtime 
code. And, he added, 
since the implementa- 
tion was made avail- 

► continued on page 11 






Feather in Apache's Cap 

Group wins JCP concessions, stands 
as face of open-source community 



BY DAVID RUBINSTEIN 

With major concessions won at 
this year's J avaO ne conference 
from both Sun M icrosystems 
Inc. and the Java Community 
Process, and implementations 
of its work appearing in the 
products of major software 
vendors, the Apache Software 
Foundation has taken a leading 
role in fighting for the open- 
ness of code. 

M uch of the group's influ- 
ence derives from its position 
within the JCP; as the only 
open-source organization seated 



on the executive committee, 
Apache is uniquely placed to 
speak for the needs of the open- 
source community as it relates to 
Java development. But J ava isn't 
the only arena in which Apache 
has made significant inroads; the 
group claims its Web server is 40 
percent faster on Windows than 



Microsoft's own IIS, and its 
Axis SOAP server was recently 
implemented by Macromedia 
in its MX application develop- 
ment tool suite. 

There are some, how- 
ever, who believe the 
efforts of the Apache 
group fall short of what 
could be accomplished for the 
open-source community, and 
question whether the group is 
or should be the symbol of 
their cause. N o one, though, can 
question that the organization's 
position as open-source advo- 
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cate has risen in the wake of the 
victory at J avaOne. 

"The reason companies are 
sitting up and listening is that 
[Apache] is the world's 
most popular and proven 
Web server," said Robin 
Miller, editor-in-chief 
of the Linux.com and 
N ewsF orge.com Web sites, who 
is known as "Roblimo" within 
the Slashdot cabal. "It is the 
single most popular open-source 
effort." 

Tim O'Reilly, of O'Reilly & 

► continued on page 12 



SUN'S COO ED ZANDER STEPPING DOWN 



In the latest of what has 
become a series of exec- 
utive changes, Sun M i- 
crosystems Inc. will lose 
COO Ed Zander on July 
1, when the head of day- 
to-day business opera- 
tions will retire. 

Zander, who next to 
CEO Scott M cN ealy was 
the highest-profile officer at the 
embattled hardware and soft- 
ware company, said he has been 




Zander will 
retire on July 1 



considering the move for 

about a year but wanted 

to help the company 

get through what he 

termed "a difficult year." 

He has been with the 

company for 15 years and 

declared, "I think Sun is 

in the best shape it's been 

in in years." Investors 

apparently didn't share the view, 

reacting to the news by driving 

down Sun's stock price more 



than 15 percent on M ay 1, the 
date of the announcement. 

M cN ealy said in a call to ana- 
lysts, "What can I say but thanks 
to just an awesome effort by 
E ddie over all these years." 

Zander joins L arry H ambly, 
executive vice president of 
enterprise services; M ike Leh- 
man, C F ; and J ohn Shoemak- 
er, executive vice president of 
computer systems, as company 
officers who have recently 
announced they are leaving. 

-David Rubinstein 
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Macromedia Fires MX at Internet 

Development, deployment tools aim to enrich user experience 



BY DAVID RUBINSTEIN 

Please stand by. Macromedia 
I nc. says that it's upgrading the 
Internet experience. 

Taking what it calls a holistic 
view of client, server and back- 
end relationships, and lever- 
aging the millions of installations 
of its Flash MX media player 
client software, M acromedia 
late last month announced the 
final pieces of its new M X prod- 
uct strategy for creating and 
delivering a new generation of 
rich I nternet applications. 

Completing the vision kicked 
off with the release of its F lash 
MX player and authoring tool 
upgrade, which the company 
claims was downloaded 100 mil- 
lion timesin thefirst sixweeksof 
availability, Macromedia (www 
.macromedia.com) announced a 
revamped ColdFusion MX serv- 
er and the new M acromedia Stu- 
dio MX toolkit. 

"This is the most significant 
product family release in the 
company's [10-year] history," 
said Jeremy Allaire, M acrome- 
dia'sCTO.'TheWeboftodayis 
about browsing. The Internet 




Flash Remoting service allows for delivery of remote components to Flash clients. 



of tomorrow is about doing." 

The Web, Allaire claimed, 
has "hit a wall," failing as an 
interactive application environ- 
ment and serving only as a lim- 
ited media and communica- 
tions platform. "The whole 
model of next-generation appli- 
cations is rich clients and a 
service-oriented architecture," 
Allaire said. "We've brought 
together the left brain and right 
brain, client and server, code 
and content." 

ColdFusion MX, previously 
code-named Neo, is the latest 
version of the company's Web 
server, which Allaire said has 
been rebuilt from the ground up 
on top of the J2EE platform, 



allowing scripting- level develop- 
ers to rapidly construct server- 
side applications that compile 
into Java and deploy into any 
J2EE environment. ColdFusion 
MX can be deployed as a stand- 
alone server or on top of Java 
application servers, he said, and 
has ActionScript server-side 
scripting support. 

The ColdFusion MX appli- 
cation server is bundled with 
Macromedia's J Run 4 applica- 
tion server, but Allaire said 
applications can be deployed 
onto any J 2EE -compliant serv- 
er, and he announced partner- 
ships with Sun Microsystems 
Inc. and IBM Corp. that will 
bring ColdFusion MX to the 



Sun ON E and WebSphere plat- 
forms, respectively, and will tie 
the D reamweaver M X develop- 
ment tool to the WebSphere 
Studio development platform 
through the Eclipse open- 
source framework. 

Developers can create re- 
usable code with ColdFusion 
Components capability built 
into MX, which also comes 
with the first commercial 
implementation of the Apache 
Axis Web services engine. A 
new Flash Remoting service 
allows developers to invoke 
and use components running 
in any application server or a 
SOAP Web service, and to 
deliver them to Flash clients, 
he explained. 

ColdFusion MX servers are 
expected to ship in June under 
two products lines— one for 
.NET and one for Java. The 
ColdFusion MX for J2EE 
Application Servers product 
line sells for $3,399 per proces- 
sor; ColdFusion MX Enterprise 
Edition for .NET is $4,999 per 
server. Flash Remoting sells for 
$799 per server. 



Macromedia Studio MX in- 
cludes the widely used D ream- 
weaver MX Web development 
tool and the F lash M X author- 
ing tool, as well as a F ireworks 
MX graphics tool- "[Adobe] 
Photoshop on steroids," Allaire 
claimed— and a developer edi- 
tion of ColdF usion M X. "We've 
created a full coding environ- 
ment, with debugging and 
drag-and-drop components," 
Allaire said. "All the tools have 
a consistent IDE." 

Dreamweaver MX com- 
bines the RAD features of 
U Itradev and the code-editing 
capability of the former 
HomeSite tool, Allaire ex- 
plained. U Itradev and Cold- 
Fusion Studio as stand-alone 
products will disappear, he 
added, but HomeSite 5 will 
continue to be available. 
M acromedia Studio M X is ex- 
pected to ship this month at an 
introductory price of $799. 
D reamweaver M X sells for $399, 
with upgrades from Dream- 
weaver, U Itradev and ColdFu- 
sion Studio costing $199. Fire- 
works M X sells for $299. 1 



.NET Framework, Unified Process 'Jolt' SD Expo 



BY ALAN ZEICHICK 

SAN JOSE, CALIF. - It's a 
12-year-old tradition, so why 
stop now? The presentation of 
Software Development Maga- 
zine's Jolt Awards was a high- 
light of CMP Media LLC's SD 
Expo conference, held here in 
late April. 

A field of more than 700 
nominees was narrowed down 
to 49 tools in six categories by 
the Jolt judges, which included 
the magazine's editor-in-chief, 
Alexa Weber M orales, and 
technical editor John Reitano, 
who joined the publication in 
late 2001, as well as SD Times 
editor-in-chief Alan Zeichick 
and contributing editor Andrew 
Binstock, and many current 
and former writers for Software 
Development M agazine. 

The top prizes were the six 
Jolt Awards themselves, which 
are intended to recognize the 
products— including tools, 
books and Web sites— that had 
the greatest impact on the soft- 
ware development community 
in the previous calendar year. 
Those honors went to Joshua 



B loch's "Effective Java" (pub 

lished by Addison-Wesley), 
Google Inc.'s Groups discus- 
sion forum system, IntelliJ 
Software's IDEA IDE for J ava, 

M icroSOft C Orp.'S .NET Frame- 
work, Rational Software Corp. 's 
Unified Process and Sitraka 
Inc.'SjProbe Suite. 

The magazine also gave out 
17 other Productivity Awards, 
lauding products that are valu- 
able for development teams 
but didn't have the same impact 
as the Jolt Award winners. 
Employees of Sun Micro- 
systems Inc. will probably be 
less than overjoyed at 
the awarding of a Pro- 
ductivity Award to 
J2EE in the Libraries, 
Frameworks and Com- 
ponents category, a sec- 
ond-place award com- 
pared with M icrosoft's 
winning the J olt Award for the 
.NET Framework, though Sun 
officially declined comment. 

"Amid all the hype and the 
strong sentiments that inevitably 
surround M icrosoft, I'm pleased 
that the judges were able to 




focus on the truly grand scope of 
the .N E T F ramework," M orales 
told SD Times. "While pieces of 
the Common Language Run- 
time and other components are 
arguably derivative of the virtu- 
al machine concepts pioneered 
byjava, M icrosoft was thinking 
big when they tied all these 
pieces together in a multilan- 
guage fashion." 

This year, Software Develop- 
ment M agazine also inducted 
Borland Software Corp. into its 

Books 

Jolt Award: "Effective Java" by Joshua 
Bloch (Addison-Wesley) 
Productivity Award: 
"Agile Software Development" 
by Alistair Cockburn 
(Addison-Wesley) 
Productivity Award: "Software 
Craftsmanship" by Pete McBreen 
(Addison-Wesley) 
Productivity Award: "Under 
Pressure and On Time" 
by Ed Sullivan (Microsoft Press) 

Design Tools and Processes 
Jolt Award: Unified Process (Rational) 
Productivity Award: Describe 

(Embarcadero) 
Productivity Award: Sitespring 

(Macromedia) 



H all of F ame, which is intended 
to recognize companies and 
products that continually have 
had a significant impact on the 
software development commu- 
nity. It also offered a first-ever 
H onorary Productivity Award to 
"Ruled White Index Cards," 
making the point that when it 
comes to development, tried- 
and-true techniques and best 
practices— and not silver- bullet 
new products— are often the 
best tools of the trade. 

Languages and Development 
Environments 

Jolt Award: IDEA (IntelliJ) 
Productivity Award: Delphi 6 and Kylix 2 

(Borland) 
Productivity Award: JBuilder 

(Borland) 
Productivity Award: Visual Studio .NET 

(Microsoft) 

Libraries, Frameworks and 

Components 

Jolt Award: .NET Framework 

(Microsoft) 
Productivity Award: Java 2 Enterprise 

Edition (Sun) 
Productivity Award: JRules (ILOG) 
Productivity Award: Ot (Trolltech) 



"Some were concerned that 
allowing a stationery product to 
make the list of finalists dimin- 
ished the gravitas of the awards," 
said M orales. "U Itimately, I think 
we handled it well— the reason 
cards made the final vote was 
because they really represent a 
way of thinking about require- 
ments and communication that 
has come to the forefront in the 
past year, especially, with the 
emergence of E xtreme Program- 
ming and agile processes. [Also] 
while we take the awards very 
seriously, there's a place for 
moments of levity in the event." I 

Utilities 

Jolt Award: JProbe Suite (Sitraka) 
Productivity Award: Ant (Apache) 
Productivity Award: DashO-Pro 

(preEmptive) 
Productivity Award: VM Workstation 

(VMware) 

Web Sites and Developer Networks 
Jolt Award: Groups (Google) 
Productivity Award: developerWorks (IBM) 
Productivity Award: MSDN (Microsoft) 
Productivity Award: WikiWikiWeb 
(Alpha Infinity) 

Hall of Fame 

Borland Software Corp. 

Honorary Productivity Award 

Ruled White Index Cards 
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Mews Briefs 



, COMPANIES , 




Herzum Software LLC, an enterprise architecture consultant, and 
MetaMatrix Inc., a data management solutions provider, have part- 
nered to promote component-based application development and 
model-driven information integration. MetaMatrix provides a platform 
through which businesses can get access to disparate data and infor- 
mation systems . . . Novell Inc. and Information Architects Inc. have 
agreed to bring together Novell's security services with lA's develop- 
ment environment for repackaging content from multiple sources 
without custom coding. lA's technology will be included in Novell's 
Active Information Portal, which delivers real-time information to an 
organization's employees . . . Acumen Advanced Technologies Inc. 
has licensed its Private UDDI Standard Edition software to BEA Sys- 
tems Inc.; the UDDI registry software is included with BEA's 
WebLogic Server 7.0. The UDDI registry, which supports both LDAP 
and relational databases as the UDDI repository, also is available as a 
stand-alone product . . . TIBCO Software Inc. has completed its 
acquisition of Talarian Corp., which was begun on Jan. 5. The Talari- 
an name will cease to exist, with SmartSockets and SmartPGM now 
becoming products in TIBCO's Active Enterprise product line. TIBCO 
acquired Talarian in a stock and cash transaction valued at approxi- 
mately $115 million. 



, PRODUCTS , 



Crystal Decisions Inc.'s Crystal Enterprise 8.5 was made generally 
available May 1 with new support for AIX and Solaris, and integrations 
with a larger number of security mechanisms. In the past, Crystal 
Enterprise ran only on Windows platforms . . . SolarMetric Inc. has 
released version 2.2.4 of Kodo JDO, its Java Data Objects imple- 
mentation for transparent persistence with high-performance 
caching features and support for Prepared Statements in queries 
. . . ObjectVenture Inc. has integrated its ObjectAssembler J2EE 
tool with Sun's Sun ONE Studio (formerly known as Forte for Java) 
. . . ArtinSoft has released the beta of WinToWeb Conversion Assis- 
tant, which converts Visual Studio .NET'S Windows Forms to 
ASP.NET's Web Forms. The tool also converts ActiveX components to 
.NET components. General availability is promised by June . . . Excel- 
sior LLC has released what it calls a high-performance J2SE 1.4-com- 
pliant Java Virtual Machine for Windows. Jet 2.5 comes in three ver- 
sions: a free personal edition, a $350/developer standard edition with 
limited support for dynamic class loading, and a $1,200/developer 
professional edition, which uses a caching JIT compiler for dynamic 
class loading . . . Microsoft Corp. has committed to creating a version 
of 64-bit Windows for Advanced Micro Devices Inc.'s forthcoming 
Hammer processors. Hammer is a 64-bit extension of the x86 archi- 
tecture, and is due out later this year . . . IBM Corp. has released a 
version of its WebSphere Studio Application Developer IDE for Lin- 
ux, as well as WebSphere Studio Site Developer, a tool for integrat- 
ing Java, XML and Web services. IBM also has new plug-ins for Web- 
Sphere Studio for developing wireless, voice and portal apps 
. . . Reliable Software Inc. has enhanced its peer-to-peer version con- 
trol system for Windows. Code Co-op 3.3 now works with Borland's 
C++ Builder and Delphi, in addition to Visual Studio .NET, and includes 
e-mail dispatching of code change notices. The product costs $145 
per seat . . . MKS Inc. has updated its Implementor configuration 
management system for IBM's AS/400 and iSeries servers. The ver- 
sion 5.3 release integrates with the company's Integrity Manager 
workflow system, and can work with IBM's DB2/400 database 
. . . The beta of Basis International Ltd.'s BBj 2.0, a cross-platform 
system that combines Java with the Business Basic programming 
language for Web-based distributed computing, is now available, with 
final availability scheduled for early May. The new release has a new 
thin client for running Business Basic applications, can run character- 
based apps in a browser, and has improved JDBC/ODBC connectivity 
. . . XML-to-Java bindings are now provided by XML-Serializer from 
Adaptinet Inc. The new tool, priced at $49.95 per developer seat, works 
with both DTDs and XML schemas, and 



Quintessence Converts PL/SQL to Java 

Migration tool makes Oracle database 'a commodity' 



BY ALAN ZEICHICK 

Are you an Oracle customer 
considering a Java strategy but 
sitting on a few million lines of 
PL/SQL code? Quintessence 
Systems has a downloadable 
application that, according to 
CEO Elton Barendse, com- 
pletely automates the migration 
process, and at a rate of about 2 
million lines of code per hour. 

According to Barendse, his 
company's new in2j tool "pro- 
vides a complete automated 
source code migration from Ora- 
cle to Java," working on PL/SQL 
currently, with support for Ora- 
cle F orms expected by J une. 

The benefit of the tool (www 
.in2j.com), which is offered free 
of charge for evaluation, and 
with license fees due only if 
the migrated code is deployed, 
is vendor portability. "in2j 
effectively liberates customers 
from Oracle's proprietary vice- 
like grip," claimed Barendse. 
"Move your business logic to 
Java and into the middle tier, 
and your Oracle database 
rapidly starts looking like a 
commodity." 

Quintessence's technical 
documentation claims that the 
migration is completely auto- 
mated. "We define 100% auto- 
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The in2j application migrates code from Oracle's PL/SQL language to Java. 



mated migration' as the capa- 
bility to transform source code 
written in one language into 
Java source that will compile 
and execute with no program- 
ming intervention whatsoever," 
it says. "Following an in2j 
migration, the only remaining 
steps are the installation and 
integration of the generated 
software components." The 
migration tool runs on a Win- 
dows workstation. 

The company also supplies a 
Java application framework, 
which must be used to deploy 
the completed J ava code. This is 



also free for evaluation, but must 
be licensed for deployment or 
commercial distribution of the 
migrated code. There is no 
charge for this license, accord- 
ing to Quintessence. 

The license cost for deploy- 
ment ranges from 75 cents to 
25 cents per line of code, 
depending on the size of the 
application, with a $5,000 per- 
project minimum. This comes 
to $37,500 for an application 
with 50,000 lines of PL/SQL 
code, according to Barendse, or 
$665,500 for an application 
with 2 million lines of code. I 



CodeCharge Gets Visual Boost With Studio 



BY DAVID RUBINSTEIN 

When 2-year-old YesSoftware 
introduced its CodeCharge 
Web application development 
tool, the focus was on pro- 
gramming. The release of 
CodeC harge Studio this month 
adds the visual elements to 
which Web designers are more 
accustomed. 

"It's almost like [M icrosoft's] 
Visual Studio on a simpler lev- 
el," said company founder and 
CEO Konrad Musial. "Our 
strength is code generation and 
prebuilding applications that 
developers can customize with- 
out much coding." 

CodeCharge Studio, M usial 
said, unites the CodeCharge 
2.0 tool with IDE features 
such as an HTML design in- 
terface, HTML and code edi- 
tors, components and wizards. 
Developers design a proto- 
type version of their software, 
and CodeCharge automatically 



generates the source code 
for the prototype, which the 
developers then can complete 
with a limited amount of pro- 
gramming, Musial explained. 
A new Power Wizard can auto- 
matically convert a whole data- 
base into a Web application, 
Musial claimed. A user would 
specify the database tables to 
be used in the application and 
can generate a search page 
with a grid and a data mainte- 
nance page, as well as menus 
for displaying the tables and 
a user authentication page, 
he explained. 

CodeCharge Studio "is a 
starting point for developers," 
he said. "They can then use the 
interface to rearrange every- 
thing on the page, add graph- 
ics or programming logic, to 
expand the basic application. 
Things are getting more 
sophisticated for Web applica- 
tion developers." 



Developers can modify the 
generated code; in Code- 
Charge 2.0, the code is gener- 
ated in blocks, and the color 
of the code blocks changes 
when modifications have been 
made so the modifications 
are not overwritten the next 
time the code is generated, 
M usial explained. 

The company (www.yes 
software.com) also has created 
an add-in for M icrosoft's 
FrontPage Web development 
tool, which Musial said pro- 
vides FrontPage developers 
with a full IDE for generating 
code in server- side languages 
such asASP, ColdFusion, Java, 
PHP, Perl and C#. Yes- 
Software also has completed 
an integration with Adobe's 
GoLive. The Studio sells for 
$499.95 per developer seat but 
can be purchased at an intro- 
ductory price of $279.95 
through the end of July. I 
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Perforce SCM Supports Unicode, .NET 



BY CHRISTINA M. PURPI 

Perforce Software Inc. has 
released a new version of Per- 
force SCM System to support 
Unicode and M icrosoft's .NET 
development environment. 
According to Kent Laux, 



director of technical marketing command, a runaway, reporting 



at Perforce (www.perforce.com), 
the system has two other impor- 
tant new features. The first is a 
group-based server utilization 
policy. "What this does is, if 
someone were to issue a wrong 



or querying-type command, the 
SCM will cancel it," he said. "It 
looks for long-running com- 
mands, and then allows you to 
resubmit the command when 
the server is not busy." 



The other enhancement 
allows the Windows installer 
for Perforce to be customized 
by a site administrator. "Cus- 
tomization of the Windows 
client can control how the 
client is installed, which can be 
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handy for large sites so you 
don't have to reconfigure the 
client," explained Laux. 

The newest version of Per- 
force SCM supports Unicode, 
which allows the Perforce serv- 
er to store files from any lan- 
guage or character set in any 
country. In addition, version 
2002.1 provides support for 
Microsoft's .NET development 
environment. Laux added that 
the new version also contains 
performance enhancements. 

Available now, Perforce 
2002.1 costs $750 per develop- 
er seat. I 

Parasoft Offers 
Web Services 
Testing Tool 

BY CHRISTINA M. PURPI 

Parasoft Corp. last month re- 
leased SOAPtest, a new Web 
services testing and monitoring 
tool, to general availability. 

According to Adam Kolawa, 
CEO of Parasoft, (www.parasoft 
.com) SOAPtest can perform 
load testing of Web services 
servers, message monitoring, 
and regression testing on de- 
ployed Web services, and has 
the ability to test both the SOAP 
server and the SOAP client. 

"You're either producing or 
consuming Web services, so 
you need the ability to validate 
what you are producing or con- 
suming. SOAPtest allows you to 
look at both sides [of Web ser- 
vices] and quickly determine if 
there are problems and where 
the problems are," said Gary 
Brunell, Parasoft's vice presi- 
dent of professional services. 

SOAPtest includes a wizard 
for creating artificial intelli- 
gence rules, which Kolawa said 
enhances the security of Web 
services by preventing errors 
from multiplying. It also has 
scripting support for Python, 
Java and JavaScript, and a 
multilayer verification feature, 
which pinpoints the exact layer 
in which errors occur. 

Kolawa claimed that there is 
no other product that tests 
SOAP for Web services. "Web 
services is a brand-new con- 
cept; nobody has come up with 
the product [to test] yet." 

SOAPtest is available now 
for download, with pricing 
starting at $50,000 for 25 seats, 
according to Kolawa. I 
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CA Updates Portal, Revamps AIIFusion 



BY CHRISTINA M. PURPI 

Computer Associates Interna- 
tional Inc. at its annual CA 
World Conference last month 
released version 4.0 of its CI ev- 
erPath Portal and rolled all of 
its AIIFusion application life- 



cycle management products 
into three suites. 

According to CA, CleverPath 
Portal 4.0 is now compliant with 
Web services standards such as 
WSDL, SOAP and UDDI, and 
hassupportforLinuxrunning on 



IBM 'szSeries mainframes. Addi- 
tional new features include more 
advanced tools for integrating 
third-party applications via Web 
services and wireless function- 
ality that can detect device type 
for the tailoring of content. 



In a separate announcement, 
CA upgraded and enhanced the 
majority of its AIIFusion product 
line, which now is divided into 
three integrated product suites. 
The Modeling Suite has new 
workgroup and multiuser capa- 
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bilities, in addition to model 
management services including 
conflict resolution, versioning 
and security. The Change M an- 
agement Suite will include a beta 
version of Change Manager 
E nterprise Workbench that inte- 
grates development processes 
across mainframes and distrib- 
uted platforms. 

H arvest C hange M anager ver- 
sion 5.1, also part of the Change 
M anagement Suite, is now em- 
bedded into M icrosoft's Visual 
Studio .NET and IBM's Web- 
Sphere I D E s. A beta of E ndevor 
Change Manager version 4.0, 
set to be available this month, is 
being enhanced to include U nix 
Systems Services support. 

The Process Management 
Suite now supports WindowsXP 
and Apache Tomcat. I 

SUITE DEALS 

AIIFusion Modeling Suite 

Model Manager, Erwin Data Modeler, 
Data Model Validator, Process Modeler, 
Component Modeler 

AIIFusion Change Management Suite 
Change Manager Enterprise Workbench, 
Harvest Change Manager, Endevor 
Change Manager 

AIIFusion Process Management Suite 

Project Engineer, Project Planner, Pro- 
ject Timesheet, Office Console Advisor 

SlickEdit Gets 
Major Upgrade 

BY CHRISTINA M. PURPI 

SlickEdit Inc. has released 
version 7 of its Visual Slick- 
Edit code-editing environ- 
ment, which now includes a 
Java debugger, an EJB wizard 
and some advanced XM L edit- 
ing capabilities. 

Visual SlickE dit hasn't had a 
major upgrade since N ovember 
2000, according to Sandy 
Smith, director of product man- 
agement and marketing. 

The company (www.slickedit 
.com) added new XM L editing 
capabilities, such as document 
validation, schemas, DTDs and 
multiple encodings, as well as 
new support for XML, .NET 
and Unicode. "This enables 
developers to use SlickE dit side 
by side with Visual Studio 
.NET," claimed Smith. 

There are also new HTML 
editing capabilities, including 
syntax expansions, automatic 
indenting, open URL into a 
buffer and XH TM L support. 

SlickE dit 7, now available, is 
priced at $299 per user for 
FreeBSD, Linux and Windows, 
$399 for U nix, and $2,999 for a 
version for IBM 's OS/390- and 
z/OS-based mainframes. I 
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WS-I 



4 continued from page 1 

main goal to enable and assure 
customers that they are creating 
Web services that will be inter- 
operable with other companies' 
Web services. These test suites 
will assure a company that its 
Web services conform to accept- 



ed Web services profiles. Yet, "it 
is unclear at present when and 
how updated versions of Web 
services standards will be adopt- 
ed," McGonnell said. In addi- 
tion, he said the specific testing 
tools are still in the process 
of being defined and it's too 
early to provide any details; 
however, vendors or Web ser- 



vices providers will be self- 
certifying, with an expected 
review by competitors and the 
trade press. 

McGonnell explained that 
because the organization is rela- 
tively new, "we're starting out 
focusing more on the low-level 
standards such as WSD L , SOAP 
and UDDI." However, in the 



long term, he would like to see 
WS-I "start taking on interoper- 
ability projects with regards to 
security, transactions and con- 
versations between services." 

The Basic Web Services Pro- 
file Working G roup concentrates 
on creating and documenting 
best practices for implementing 
existing Web services specifica- 
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tions such as SOAP, XM L and 
UDDI. Also, by defining the 
implementation of existing stan- 
dards, WS-I will be able to make 
recommendations to standards 
bodies such as the W3C for 
improving those specifications, 
according to McGonnell. 

The Sample Applications 
Working Group is geared toward 
providing samples of actual Web 
services that conform to specifi- 
cations and that already have 
been done, McGonnell said. 
'This will allow businesses to 
better understand technology 
and create Web services more 
easily. It's a good starting point." 

All three of the working 
groups are in the process of 
identifying specific deliverables 
and timelines, according to 
McGonnell. "Road maps have 
not yet been defined, although 
the first set of deliverables [is] 
expected in the next six months." 

Ron Palmeri, vice president 
of business development at 
Grand Central Communications 
Inc., a Web services infrastruc- 
ture provider and a WS-I mem- 
ber, said the role of the organi- 
zation is to communicate to the 
marketplace that everything will 
work together. "We're not trying 
to replicate work that other 
standards bodies are already 
working on," said Palmeri. "The 
WS-I does not own the actual 
standards, and so is not trying 
to define them." 

When asked about basing an 
entire organization on testing 
interoperability with specifica- 
tions that, in several cases, are 
in preliminary form, Palmeri 
commented, "These standards 
will continue to evolve. The 
only way you can do any kind of 
interoperability is to put a stake 
in the ground and say, we're 
going to use SOAP version x, 
WSDL version ;/ and UDDI 
version z, and that makes up 
the base profile." 

John Hanger, senior vice 
president of sales and marketing 
at F lamenco Corp., also a mem- 
ber of the organization, sees the 
WS-I as "subject to all of the 
political scenarios that are typi- 
cal of a standards body that 
have existed in the past. [That 
includes obstacles] such as large 
corporations who have business 
agendas in addition to standard 
agendas. There isan obvious risk 
that things could go awry, but I 
haven't seen an indication [of 
that] yet other than the whole 
riff around Sun and their partic- 
ipation or nonparticipation" (see 
"WS-I: Another Standards Bat- 
tle Begins," page 27). I 
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•« continued from page 1 

able prior to the release of J D 
1.0, it was not compliant with the 
spec. Russell is now with Sun's 
server team— the former iPlanet 
group— where he said work is 
under way on a new Sun imple- 
mentation of J D , but he could 
not say when it will be available. 

What was also puzzling 
about Sun's notification was 
that it contained a recommen- 
dation for developers in need 
of transparent persistence to 
adopt T hought I nc.'s C ocoB ase, 
an object-relational database 
mapping tool that also is not 
JDO-compliant. 

This baffled Thought CTO 
Ward M ullins. "The official rea- 
son they are discontinuing the 
tool is that their implementation 
is not JDO-compliant. But if 
that's true, why did they recom- 
mend us? We're not JDO-com- 
pliant either." M ullins has been 
an outspoken opponent of JDO 
1.0 for many reasons, one of 
which is its lack of mapping spec- 
ifications. "There's nothing in the 
spec about object-relational 
mapping or how objects get 
mapped to relational databases." 

Yet Sun's Russell said the 
omission was intentional. "We 
didn't want people to get con- 
fused that this was a mapping 
standard, because it really 
goes far beyond object-rela- 
tional mapping." 

FROM ODMG TO JCP 

M ullinsalso allegesthatJDO 1.0 

is little more than a rehashing 
of a failed set of specifications 
once attempted by the Object 
D ata M anagement G roup (www 
.odmg.org). "They've changed 
the name to protect the in- 
nocent, but it's basically a re- 
write of the ODMG's API 
specs with very few real 
changes." Russell admits a rela- 
tionship. "WhenJSR-12 [JDO] 
was started," he said, "there 
was early work being done by 
an ODMG committee on de- 
fining an interface, but the pro- 
cess wasn't getting the commu- 
nity involvement. Rather than 
abandoning what was supposed 
to become ODMG 4.0, they 
[decided to] donate the IP to 
thejava Community Process." 
But Russell said that JDO 
1.0 and the D M G specs share 
little today. "There's almost no 
similarities between them. 
The ODMG property file is 
non-XM L metadata that con- 
tains three keywords and seven 
parameters. JDO uses XML 



that defines eight elements and 
22 attributes," he said. He 
admitted that JDO kept some 
of ODMG's transaction meth- 
ods, including begin, commit 
and rollback, and that it 
retained and renamed some of 
its database methods. 

M ullins and Russell had 
engaged in a months-long 



exchange on a developer Web 
site (www.theserverside.com 
/discussion/thread.jsp?thread_id 
=771), during which M ullins 
claims he pointed out flaws 
in JSR-12, and that his input 
was ignored. Thought Inc. is 
not a member of the JCP. 
Russell characterized M ullins' 
input as flames. "Ward has an 



ax to grind," he said, but would 
not elaborate. 

Dirk Bartels, president and 
CEO of object database devel- 
oper Poet Software Corp. (www 
.poet.com), whose company 
maintains the JDO-centric Web 
portal jdocentral.com, added 
that Sun's removal of its JDO 
implementation from Forte is 



not significant. "I wouldn't worry 
about it. A number of other I D E 
vendors are interested in poten- 
tially bundling [their own im- 
plementation] over time. J DO isa 
young standard that is still ma- 
turing. When you look at jdo 
.central.com, there's a variety of 
products from charter members 
to work with that are open." I 
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4 continued from page 1 

Associates Inc., said, "Apache 
told Sun to treat open source as 
an equal. It's an example of the 
moral force Apache carries. This 
is the moral force of a reason- 
able participant in a process." 

Brian Behlendorf, co-founder 
and self-titled "ringleader" of 
Apache (www.apache.org), is 
modest about the organization's 
gains. "By being able to point to 
the numbers of people using 
[Apache implementations], we 
gained a degree of influence," 
said Behlendorf, who also 
serves as CEO of CollabNet 
Inc. "We've also been lucky to 
have developers who are elo- 
quent in speaking to the corpo- 
rate community, to explain that, 
hey, there is some process here" 
for developing software. 

The seeds for Apache were 
planted in the early 1990s, 
when a group of 10 people 
began working with the Nation- 
al Center for Supercomputing 
Applications(NCSA) Web serv- 
er, sharing the source code 
on mailing lists and bulletin 
boards and creating patches to 
improve the server. The group 
banded together with their 



patches, and Apache was 
formed in 1995. "We didn't 
want the layer to be owned 
by N etscape or AO L or M i- 
crosoft," Behlendorf ex- 
plained. "We didn't want 
licenses to restrict us from 
doing what we were doing." 

F rom the Web server 
project, Apache moved on 
to Jakarta, its open-source 
Java project, which began 
with what Behlendorf called 
a paranoia of big companies 
moving standards in their di- 
rection. "Java is as much about 
syntax as it is about political 
control over the APIs," he said. 
"The ability to modify and 
redistribute is key to open 
source, but was not allowed." 

Apache approached Sun to 
work on a Java servlet API — 
"because it was used the most," 
Behlendorf explained— and the 
Tomcat project was begun. "B ut 
that still left over a hundred 
standards in limbo," he said. 
The barrier to implementation, 
he explained, was in the legal 
contracts and the licensing fees 
required for test conformance 
kits. So Apache told its develop- 
ers to stop creating implemen- 
tations that Apache did not have 
the legal right to distribute. It 
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Co-founder Brian 
Behlendorf 



was this leverage, Behlendorf 
believes, that persuaded Sun to 
liberalize itsJCP rules. 

"If Sun is the [J CP] spec lead, 
most of the time it will allow for 
open-source implementations," 
Behlendorf said. "If some stan- 
dards demand the use of patent- 
ed algorithms, for example, Sun 
said they can't do anything." 
Behlendorf said Sun's conces- 
sion still is not clearly defined, 
and that theApache group isstill 
waiting for the agreed-upon 
changes to be put into effect. 

Onno Kluyt, manager of 
theJCP Program Management 
Office, said Sun invited Apache 
into the JCP in June 2000. "We 
invited them to the Executive 
Committee for two reasons. The 
main one is that Apache is a 



well-recognized open-source 
committee. They're also a 
good temperature-reader of 
the open-source committee 
at large, including other 
groups or efforts." 

Kluyt emphasized that de- 
spite appearances, the deal 
negotiated between Sun and 
Apache for providing access 
to Java technology and test 
kits wasn't just to benefit 
Apache. "If it doesn't work 
for Apache, it likely won't 
work for any of the organiza- 
tions or individuals who work 
in the open-source environment. 
Apache is the first step." 

Standards and open source 
go hand-in-hand, according to 
O'Reilly. "They reinforce each 
other. An open-source project 
without standards doesn't build 
an ecosystem. Apache has been 
impressive, compared to the 
Netscape hype, partly because 
Apache held the line on stan- 
dards to be the reference 
implementation people could 
count on." 

CROSSING THE CHASM 

That, to the thinking of Free 
Software Foundation founder 
Richard Stallman, is at the crux 
of the issue. "When [Apache 



comes] to a chasm, they're like- 
ly to say, 'Oh well, it's not worth 
the fight.' F or us, it's about free- 
dom to study, change and redis- 
tribute software." 

Part of what makes Apache so 
important to commercial ven- 
dors is the liberal license, which 
allows them to incorporate the 
work of Apache into their propri- 
etary products without returning 
their changes to Apache. That's 
not good in Stallman's book. 
"That denies users freedom," 
Stallman insists. "The [Apache] 
license permits you to make a 
nonfree extended version and 
distribute it without source code. 
If you benefit from freedoms, 
you must respect them for oth- 
ers. Apache would do better if 
they defended your freedoms." 

As for whether or not Apache 
speaks for the open-source com- 
munity, M iller said, "That's like 
saying you can set the agenda 
for the anarchists' convention. 
Apache is an outstanding exam- 
ple of why open source works, 
but there is no agenda. They're 
just the poster boy." 

"Linux is the face of open 
source," O'Reilly said. "Apache 
has become the crossroads for 
development. It's not a religious 
issue; it's pragmatic." I 
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Pratt & Whitney Certifies 
Engine to DO-17AB 
Level- A With Aonix® 
ObjectAda© / Raven™ 

BOULDER, Colorado, 
January 24. 2002 - Aonix, a 
member ofthe Gores 
Technology Group and a 
reading provider of Ada 95 



software development 
environments and safety 
critical solulions. has 
announced lhat Pratt & 
vVhrtnay has successfully 
certified rts newest commercial 
jet engme, the PW6000, using 
ihe ObjeclAda®/ Raven™ 
runtime system. 



The Pratt & Whitney 
certification was achieved at 
software Levet-A of RTCA's 
DO-178B. Software 
Considerations in Airborne 
Systems and Equipment 
Certification. Gertificalion to 
DQ-178B req^fes that all 
COTS software included in the 
product be certified to the 



Aonix... 

on target from 

the very beginning. 




same standard as Ihe core 
product. Object Ad a/Raven 

meets Ihrs standard for 
Level >A systems. 

Pratl & Whitney 
incorporated the full suite of 
lifecycle artifacts provided 
by Aonix within Ihe overall 
engine-system software 
documentation set approved 
for certification by Ihe 
Federal Avtation Admin- 
istration. By using ihe 
ObjectAda/Raven product 
and associated documen- 
tation, Pratl ft Whitney was 
able lo focus development 
efforts on its core 
competency of engine- 
system software, while 
ensuring that Ihe run-time 
system portion of Ihe 
product was developed and 
verified by experts in thai 
domain. This approach 
reduced the schedule and 
technical risks associated 
with the program while atso 
reducing devafopmenf cost- 

" Pratt & Whitney sefected 
the ObjectAda/Raven 
product for use on the 
PW6000 in 1S98 following 
an extensive evaluation, 
Aonix was selected for a 
variety of reasons including 
the usability of Ihe tool set 
and the technical support 
that they were abJe to 
provide," slates Bret Lynch, 
Manager, Real Time and 
Embedded Software for 
Pratt ft Whitney. "The main 
discriminator, however, was 
Ihe safety-critical domain 
experience of the company 
and their ability to meet the 
standards required for 
incorporation into a DO- 
178B Level -A software 
system." 



Aonix as the leading supplier 
of certifiable run-time 
systems for the A da B3 
language and offers the onfy 
certified Ada 95 run-time 
system. ObjectAda/Raven 
is certifiable to the highest 
certification fevets and 
meets the DO-178B Levet-A 
required by the FAA for 
airborne systems. 
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Synthesizable ARM10 
Core Set for July Release 

ARM6 to target real-time, multimedia apps 



BY EDWARD J. CORREIA 

ARM Ltd., a maker of RISC- 
based embedded processor 
cores, in July is scheduled to 
release ARM 10EJ-S, a synthe- 
sizable version of its ARM 10E 
core that the company says 
gives developers new control 
over how the core is config- 
ured, enabling them to select 
the optimal setup for perfor- 
mance and cost efficiency. 

According to Eric Schorn, 
ARM'S CPU product manager, 
ARM'S synthesizable core 
makes it possible to optimize 
the size of processor caches 
and tightly coupled memories 
(TCMs) to best suit the appli- 
cation. Schorn described TC M 
as "a scratch-pad RAM that's 
directly attached to the pro- 
cessor," and used for storing 
data and/or instructions that 
the processor can access on a 
dedicated bus at very high 
speeds. "If it's a hard real-time 
application, you might prefer 
to lock down your code into 
the TCM, so that [its perfor- 
mance is] predictable." 

Giving developers control 
over these parameters can 
help them save on hardware 
costs, he said. "If you have a 
small application, you don't 
want to [set aside] a huge 
[TCM ], because that's going to 
cost you in die area." 

The ARM 10 improves 
performance over its 
ARM 9 predecessor by 
incorporating 64-bit 
buses throughout, in- 
cluding its two system 
interfaces. Such duality 
improves performance, 
Schorn claimed, by al- 
lowing two instruc- Tailoring the core 
tions to pass in a single can help save 
processor cycle, or money, says 
by allowing 32-bit in- ARM'S Schorn. 
structions and data 
to flow simultaneously. "Per- 
haps instructions are coming 
from F lash and the data from a 
streaming video peripheral. 
They can be coming from dif- 
ferent sources and the core 
can exploit that parallelism." 
ARM first introduced dual 32- 
bit system interfaces on its 
ARM 926 processor; all other 
ARM cores offer single system 
interfaces, he said. 




The ARM10EJ-S processor core can be optimized to suit the application. 




Schorn insisted that despite 
its 64-bit buses, from a devel- 
oper's perspective, the ARM 10 
appears as a 32-bit architec- 
ture. "If you look under the 
cover at what the hardware is 
doing, it's moving 32-bit units 
around in parallel using 64-bit 
buses. The instruction set all 
along has been 32-bit. The 
developer tools and applica- 
tions stay the same, and all pre- 
existing code will run as is." 

ARM'S new ARM 10 IP also 
will include J azelle, the com- 
pany's hardware implemen- 
tation of the Java 2 M icro 
Edition VM. "Essentially, this 
removes a large part 
of the Java Virtual M a- 
chine interpreter code 
[from the software 
footprint of the target 
device], and replaces 
it with a small amount 
of hardware," accord- 
ing to Schorn. 

He explained that 
rather than inter- 
preting bytecodes step 
by step and emulating 
the necessary behavior in soft- 
ware, the hardware instruction 
decoder executes Java byte- 
codes directly and "tells the 
data path what to do to get the 
job done in hardware, cycle by 
cycle. This improves perfor- 
mance by approximately eight 
times and saves [device] pow- 
er," he claimed. 

Schorn insisted that J azelle 
will run all Java applications. 



"J azelle implements the bulk 
of the Java bytecodes in hard- 
ware, with a few exceptions 
patched up in software," he 
said. "We provide both the 
hardware and software refer- 
ence design to [customers], 
who then integrate it with 
the operating system, so appli- 
cations don't realize anything 
has changed. It's completely 
compatible with existing Java 
bytecode." 

The company (www.arm 
.com) also has unveiled ARM 6, 
the next generation of its 
processor architecture that it 
says will include new instruc- 
tions targeted at multimedia 
and industrial control app- 
lications. ARM 6 will be first 
implemented in the ARM 11 
processor core, and reach pro- 
cessor frequencies as fast as 
500MHz. 

"We've developed a lot of 
enhancements to accelerate 
audio and video performance," 
said Dave Cormie, also a CPU 
product manager at ARM. 
Other enhancements, he said, 
will come through collabora- 
tion with operating- system 
vendors including Microsoft, 
Symbian and Wind River, and 
will include accelerated real- 
time performance by way of 
better exception handling and 
interrupt response time, and 
improvements to the memory 
system architecture. 

ARM 6 is scheduled to 
begin shipping by year's end. I 
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automatically performs data type checking . . . BEA Systems Inc. 
announced the general availability of Web Logic Server 7.0 last 
month. Enhancements were made in the areas of developer produc- 
tivity, security and Web services support . . . The Imaging Source 
Europe GmbH has updated its royalty-free ActiveX/C++ text-editor 
class library for Windows. The new release, called TX Text Control 
v9 Enterprise/XML, includes a WYSIWYG XML editor, CSS, input val- 
idation with DTDs, and XML to RTF, HTML and Microsoft .DOC con- 
version. It is priced at $949 per developer seat . . . With version 2.5, 
Hit Software Inc.'s DBMotion data replication software, available this 
month, now allows real-time replication from Microsoft's SQL Server 
to DB2 running on IBM's AS/400 or iSeries servers. Pricing is $2,995 
per server . . . Anysoft Inc. has shipped its Digital Cortex application 
tools, which create programmatic access to existing COM/ActiveX 
applications. Announced earlier this year, the company has lowered 
the prices to $199 per developer seat, $295 per deployed desktop 
and $7,500 per deployed server . . . Metrowerks Inc. has released 
CodeWarrior Development Tools for intent, allowing development 
of applications on Tao Group's intent media platform for such con- 
sumer appliances as set-top boxes, mobile phones, digital cameras 
and handheld computers. The intent platform is included with the 
CodeWarrior tools . . . Command Prompt Inc. has released Mammoth 
PostgreSQL, which the company claims is compatible with Post- 
greSQL 7.2.1, and includes support for SSL and APIs for C/C++, Perl 
and Python. The deluxe version includes a SQL/XML application serv- 
er called LXP. It is available for Mac OS X and Red Hat Linux 
. . . Microsoft Corp. has formally released the beta of its .NET Com- 
pact Framework, a version of the .NET Framework for its Windows CE 
operating system. 



, PEOPLE , 



Michael Lehman, CFO of Sun Microsystems Inc., is retiring after near- 
ly 15 years with the company, and will be replaced by Steve McGowan, 
currently VP of finance, planning and administration. Sun also pro- 
moted Whitfield Diffie, one of the inventors of public-key encryption, 
to chief security officer. Diffie had joined Sun Labs as a researcher in 
1991 . . . Advanced Micro Devices Inc. has a new CEO, Hector J. Ruiz, 
who takes over from co-founder William "Jerry" Sanders III, who will 
stay on as chairman through 2003. Ruiz left Motorola to join AMD in 
2000 as president and COO . . . Jeff Rhodes joins TeamShare Inc. as 
its new CEO. Previously, he served as president of HotelNet. 
TeamShare's previous CEO, Bruce Huebner, will remain in an advisory 
role with the company. 



STANDARDS 



IBM Corp. is making available Enterprise Media Beans, which the 
company says will provide a framework for rich media to be included 
in J2EE applications based on EJB Entity Beans without developers 
needing to know client type, server media protocols or media format. 
The JCP approved IBM's proposal to make this a specification by a 
12-0 vote; it is known as JSR-86 . . . The JCP also has created a pub- 
lic review draft of JSR-52, a Standard Tag Library for JavaServer 
Pages, and of JSR-62, Personal Profile Specification; released a 
community review draft of JSR-75, PDA Profile for J2ME; released a 
proposed final draft spec for JSR-101, Java APIs for XML-based RPC; 
has approved JSR-110, Java APIs for WSDL; released a public review 
draft of JSR-118, Mobile Information Device Profile, and of JSR-139, 
Connected Limited Device Profile; and has a proposed final draft of 
Java API for XML Registries 1.0 (JAXR) ... The W3C has released 
its Platform for Privacy Preferences 1.0 as an official W3C Recom- 
mendation; it describes a standard way to publish and read privacy 
policies . . . The group also released last call working drafts of the XML 
1.1, CCS3 Color and VoiceXML specs, along with version 6.0 of its 
Amaya Web browser reference implementation ... A joint committee 
of the W3C and the IETF released a working draft of their XML Sig- 
nature XPath Filter spec. I 
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Embedded Systems Conference Heads to O'Hare 



BY ALAN ZEICHICK 

Forget about downtown Chica- 
go: CMP Media LLC'sEmbed- 
ded Systems C onference is leav- 
ing its traditional home and 
relocating to the Donald E. 
Stephens Convention Center, in 



Rosemont, III. Much closer to 
O'Hare International Airport 
than to the downtown hotels, 
the new suburban location 
should be more convenient to 
attendees and exhibitors, accord- 
ing to the show organizers. 



This year's event, with ses- 
sions from Monday, June 3, 
through Thursday, June 6, will 
have more than 90 classes, along 
with nine full-day tutorials rang- 
ing from DSPs and TCP/IP, to 
C ++ and U M L . N ew classes for 



this event cover J ava, the .NET 
Compact Framework, Extreme 
Programming, developing for 
handheld devices, cost estima- 
tion, block I/O drivers and other 
key topics. 

A keynote presentation, 
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scheduled for Tuesday at noon, 
will be given by Nick Treden- 
nick, original microcode devel- 
oper for the M otorola 68000 mi- 
croprocessor, and currently the 
editor of Dynamic Silicon maga- 
zine. Tredennick will discuss the 
embedded market's evolution. I 

EmhndflRdSystems 
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CONFERENCE: 

June 3-6 

Donald E. Stephens Convention Center 

Rosemont, III. 

CONFERENCE HOURS: 
Monday, 9:30 a.m.-5:30 p.m. 
Tuesday, 7:30 a.m.-4:30 p.m. 
Wednesday, 7:30 a.m.-4:30 p.m. 
Thursday, 7:30 a.m.-4:30 p.m. 

EXHIBIT HOURS: 
Tuesday, 2 p.m.-7 p.m. 
Wednesday, 11 a.m.-5 p.m. 

KEYNOTES: 

Tuesday, Noon-1 p.m., "The Evolution of 

Digital Design," Nick Tredennick 

www.esconline.com/chicago 

Empress Offers 
Database Access 
Using C APIs 

BY ALAN ZEICHICK 

Why use SQL orODBC/JDBC 
when you can access an embed- 
ded data store directly via C 
API calls? That's the mantra of 
Empress Software Inc., which 
has released Embedded Real- 
Time Toolkit as an add-in to its 
Empress RDB MS. 

According to the company, 
the toolkit directly implements a 
number of abstract data types in 
the Empress RDBMS using 
more than 200 C API calls, 
including arrays, circular buffers, 
queues, stacks and tables, and 
lets developers leverage record 
numbers, time stamps, unique 
keys and serial numbers. 

"SQL and ODBC don't cut 
it for maximum performance 
and efficiency," claimed Ivor 
L add, vice president of technol- 
ogy at E mpress (www.empress 
.com), in a statement. The 
toolkit is delivered as source 
code, and is priced at $2,599 
per developer seat for compa- 
nies that have already licensed 
the E mpress RD B M S, or $2,999 
including the database license. 
The company states that the 
database runs on Linux, Unix 
and Windows, as well as Lynx 
OS, QNX and several other 
embedded operating systems. I 
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Tl's Wireless Hand: Pair of New Kits 



BY EDWARD J. CORREIA 

Texas Instruments Inc. at the 
end of April released the latest 
in a series of hardware and soft- 
ware development kits for 
boards based on its C5000 low- 
power digital signal processors. 
The new kit, cleverly named the 
TMS320C5416 DSP Starter Kit, 
includes host-to-target commu- 
nications over USB, which Tl 
says improves code download 
and debugging performance. 

The kit (www.dspvillage.ti 
.com/c5416dsk4) comes with 
Tl's C5416 DSK development 
board, encompassing a 16/20- 
bit stereo codec, four audio 
I/O jacks and embedded JTAG 
emulation via USB, and is 
designed to target a multitude 
of speech-enabled applications, 
such as speech-to-text conver- 
sion, according to the company. 
Priced at $395, the kit also 
includes a version of CodeCom- 
poser Studio 2.1 C/C++ inte- 

BIRDSTEP FLIES 
INTO MIRRORING 

BY EDWARD J. CORREIA 

E mbedded database developer 
Birdstep Technology has re- 
leased RDM Embedded 6.0, 
the latest version of its small- 
footprint database engine that 
the company says now includes 
mirroring, a SQL interface and 
simplified reentrancy. 

The company (www.birdstep 
.com) says mirroring capabilities 
allow fault-tolerant systems by 
way of a mirrored database copy, 
with automatic rollover to the 
backup if the primary database 
fails. Database migration can be 
synchronous or asynchronous. 

Also new is an ODBC 3.5- 
compliant SQL API, replacing 
dbQuery In addition, Birdstep 
has simplified reentrancy func- 
tions, which are implemented as 
a single set of API calls for sin- 
gle-tasking and multitasking. 
Reentrancy is a library function 
characteristic that allows multi- 
ple processes to use the same 
address space while keeping the 
val ues for each process constant 
between calls. 

The API also includesa set of 
mappings to the old API calls to 
ensure compatibility of legacy 
code, the company says. 

RDM Embedded 6.0 requires 
about 225KB of device memory, 
depending on the host operat- 
ing system, and supports Linux, 
QNX, Unix and Windows. I 



grated development environ- 
ment for W indows development 
hosts, Tl's DSP/BIOS real-time 
kernel, and error recovery target 
software and diagnostics tools. 

The company also is working 
toward a September release of 



the Innovator Development Kit 
(www.ti.com/sc/rd/innovator), a 
set of hardware and software 
tools designed to simplify devel- 
opment of handheld and wireless 
computing applications that en- 
compass its OMAP processor 



running Linux, Palm OS, Sym- 
bian OS or Windows CE. The 
basic kit reportedly will include 
an iPAQ-style handheld comput- 
er with OMAP 1510 processor, 
16M B RAM and F lash, a touch- 
sensitive color LCD display, 



stereo speakers and I/O, and 
interfaces for USB, IrDA and 
RS-232. A deluxe version will in- 
clude an enclosure for the hand- 
held unit that adds E thernet and 
PS/2 ports for keyboard and 
mouse, plus a battery and charg- 
er. Optional expansion modules 
will be available for GSM /GPRS, 
802.11b and Bluetooth. I 
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V, Java 
and Symbian: 

Calling All Apps 

Strategies for enabling 

enterprise applications over 

cellular phones 



BY EDWARD J. CORREIA 



Your CEO has just dropped a 
bomb. You have six months to 
make your company's customer 
relationship management appli- 
cation available to all of the 
company's salespeople from anywhere in 
their territories. But here's the kicker: 
You have to do it without buying any 
new hardware. What will you do? 
Although many organizations are placing 
handheld computers at the heart of their 
wireless strategy, an option worth 
exploring is the intelligent cellular tele- 
phone, equipped with an application 
stack such asQualcomm's BREW, Sun's 
Java or Symbian's OS, a trio of con- 
tenders vying for market acceptance. 

W hile there certainly are other niche 
players available or soon to be, including 
mobile phones based on Palm's Palm 
OS, RIM's Blackberry and Microsoft's 
ever-forthcoming "Stinger" Windows 
CE -based operating system, many 
developers may choose to focus on the 
broader devices and platforms. "If you 
want to enable the bulk of your mobile 
work force with enterprise apps, you 
have to think cell phones," said Jeremy 
James, senior director of marketing at 
mobile-phone pioneer Qualcomm Inc. 
(www.qualcomm.com), which develops 
and markets BREW, the Binary Runtime 
Environment for Wireless. James said 
BREW, which is used extensively in 
Korea, has been deployed in several oth- 
er pockets around the world and will soon 
be offered across the U .S. by Verizon. 

J ames claimed that Q ualcomm is the 
only single-vendor cell phone applica- 
tion vendor. "[With other vendors,] you 
have to piece together your own system. 
You get the development environment 



from here, the provisioning system from 
there and the carrier from another 
place. With BREW, we offer not just the 
environment, but the wireless down- 
loading system from the developer's 
computer all the way to the end-user 
download server." 

James said developers use the free 
BREW tools to build small executable 
modules that enable mobile users to 
have "focused utility, and to deploy the 
most important aspects of their current 
desktop applications in a wireless app." 
H e said developers going wireless need 
to begin thinking about what views of 
the information will be most useful for a 
particular user. "You might have a sales- 
man [and] service tech who are general- 
ly sharing a single data store, but are 
interested in different elements of the 
information. What would be most useful 
to them when they are mobile? And 
what would be practical given the mem- 
ory, processing and Ul constraints of a 
cell phone? The idea of shrinking Oracle 
down to fit on a handset is probably the 
wrong way to think about this," he said. 

Of course, some organizations may 
find a single- vendor strategy like BREW 
to be dangerous, preferring to have 
more of a choice. While, ultimately, Java 
technology comes from Sun M icrosys- 
tems Inc., many manufacturers build 
Java 2 Micro Edition-based handsets. 
Indeed, Sun has recently directed con- 
siderable resources at giving developers 
a place to start. 

I n April the company launched wire- 
less.java.sun.com, a portal dedicated to 
wireless Java development. Maryann 
Rayner, the site's editor, said that among 
the major challenges is keeping up to 




date on dimensions and capacities of the 
variety of wireless devices that might be 
out there; Sun says there are currently 
65 Java-enabled phones using 11 wire- 
less communications technologies. 

"It's one thing to know the sizes; it's 
another to implement [applications to 
them]," she said. Because in addition to 
variations in processor power, RAM and 
screen size, some program- 
ming concerns are carrier- 
specific. "About 75 to 80 per 
cent of your code you write 
once," she said. "Then when 
you go on a specific phone or 
carrier, you pay attention 
to different things. When 
a device is coupled with a 
back-end server, as with 
end-to-end implementations, 
you've got security, threads, 
sessions and data-synchroniza- 
tion concerns." 

Paul Pangaro, Sun's senior direc 
tor of developer Web services, admit- 
ted that Java can't solve all the problems 
a wireless developer will face. Among 
them is deployment, which is still in the 
hands of carriers, phone manufacturers 
and other third parties such as portal 
providers. "We address the issue on the 
site," he said, "but that will continue to 
develop as carriers become more capa- 
ble of helping developers get stuff to 
end users." 

Presenting a third option is the 
Symbian OS, which offers both a 
native development environment and a 
JVM. Developed by Symbian Ltd. (www 
.symbian.com), a consortium of cell 
phone manufacturers that includes 
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Motorola, Nokia, Panasonic and 
Sony/Ericsson, Symbian OS offers 
developers a choice among Java, C++ 
and Visual Basic, with tools available 
from Borland, M etrowerks and App- 
Forge. 

Paul Cockerton, Symbian's head of 
communications, said developers' pri- 
mary concern when seeking to mobilize 
enterprise apps should be availability of 
phones that will run their code. "For a 
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developer, one of the things you want to 
know about is, 'Are there going to be 
devices out there?' M ore than 70 per- 
cent of the mobile industry has already 
started developing Symbian OS phones. 
The question [becomes], do they want 
to write in Java, C++ or Visual Basic?" 

Symbian OS also gives developers an 
operating system that Cockerton said is 
consistent from one phone vendor to 
another, with source code available. "It's 
the same Symbian OS that goes into 
each phone; 80 percent of [native appli- 
cation] code will be the same," Cocker- 
ton asserted, adding that the only differ- 
ences will be hardware-specific. "The 
developer will need to optimize for a 
particular phone, and take into account 
what buttons the phone has, the size of 
the screen and each phone's interface." 

Forjavaapps, Symbian relies on car- 
riers and Web portals for deployment 
over the air. For native apps, Cockerton 
said there are other options. "It's still [in 
a] fairly early stage as yet, but apps can 
be put on the phone [prior to] produc- 
tion, for instance by Nokia, or they can 
be included in the platform, as we've 
done with the Opera Web browser." As 
for enterprise applications, testing 
requirements vary by carrier, he said, 
and most will want to perform some. 

Qualcomm'sjamessaid that his com- 
pany also relies on carriers for enterprise 
application deployment. "The BREW- 
enabled handset touches the application 
download server inside the carrier's net- 
work and the carrier acts as the retailer 
of the app." B ut J ames drew a clear dis- 
tinction between Java apps, which run 
through a JVM and can be downloaded 
wirelessly, and native apps of the BREW 
environment, which are controlled. 

"In our experience, carriers are not 
too keen on things going on phones that 
they don't know about. Part of our secu- 
rity model is that the BREW Distribu- 
tion System does not allow the anony- 
mous downloading of apps. J ava apps are 
'sandboxed,' so theoretically they can't 



crash the phone or 
the network. But by the 
same token, there is a limit to their func- 
tionality. The ability to reach deeply into 
the phone makes apps more powerful. 
BREW apps can do a lot because they 
can integrate with core phone function- 
ality. The phone and the network are 
protected because apps are tested and 
only distributed via wireless download 
from the carrier." 

Cockerton claimed that the Symbian 
OS includes safeguards against errant 
native code. "Because of the rigorous 
architecture of the Symbian OS, we take 
care to make sure things don't crash. 
And we manage all the interrupts of a 
particular application so you can run and 
take calls and manage different process- 
es all at the same time." 

But Cockerton added that another 
competitive advantage for J ava develop- 
ers writing to Symbian'sJ VM over those 
atop proprietary operating systems is 
that it might save them from having to 
write any native code. "Symbian has 
been working closely with Sun on its 
JavaPhone [API], which permits Java 
applications to call a phone's native 
APIs" and directly access the device's 
hardware functions, such as dialing and 
sending messages. "When Java is writ- 
ten to a proprietary OS, that's more 
difficult." Some carriers, including 
SprintPCS, have developed their own 
extensions to J2ME, enabling direct 
hardware access on particular devices. 

But Qualcomm's James contended 
that BREW is superior due to its ability 
to operate in more constrained hard- 
ware environments than the so-called 
smartphones needed to run Java. "What 
enterprise wants to have a smartphone 
as a primary pillar of its mobile strategy? 
If you can begin by provisioning appro- 
priately designed apps on cell phones, 
then you're able to touch all of your 
mobile users. The fact that some will 
already have smartphones means some 
will be able to do more." I 



SALT Forum: Talk To 
Your Web Services 

Tagging scheme to speech-enable apps 




BY EDWARD J. CORREIA 

If the SALT Forum sticks to its 
published schedule, there will 
be another way of mobilizing 
enterprise applications available 
this year, provided the apps are 
deployed as Web services. ^ 

The Speech Application Lan- i M 

guage Tags Forum, a diverse SALT tagging 
industry consortium, last year set leverages exist- 
out to develop a royalty-free way ing Web services, 
of expanding existing markup says Microsoft's 
languages to provide spoken Mastan. 
access to Web content. I n M arch 
the group released SALT 0.9, a draft ver- 
sion of its tagging specifications, and 
announced its intention to submit the 
specs to a standards body that has yet to 
be selected. 

J ames M astan, group product manag- 
er of .NET speech products at SALT 
member M icrosoft Corp. and chairman 
of the SALT (www.saltforum.org) mar- 
keting working group, described one of 
SALT'S many possible applications as a 
replacement for interactive voice 
response (IVR) systems common today. 
"Rather than hearing 'press 1 for this, 
press 2 for that,' and hearing responses 
spoken back, you could speak into a 
PDA and get visual output, like a list of 
available flights." 



M astan explained that SALT 
works by extending existing 
markup languages such asXM L, 
HTML or XHTML. "It adds a 
few lightweight, speech-related 
tags so that all a developer has to 
do is add those tags and some 
scripts to their existing Web 
application, recompile it, and it's 
speech-enabled," he claimed. 

In addition to the develop- 
ers' tools (an extension to 
VisualStudio .NET was sched- 
uled for beta release on M ay 7), 
there are two major components to 
make SALT work. A server speech 
recognition engine (such as those from 
SALT members Philips and Speech- 
Works), a telephony server and the 
client software, which Mastan said for 
a PC is a speech-enabled visual browser 
(an IE extension was scheduled for 
release on M ay 7). 

Mastan explained that the telephony 
server handles incoming calls and PBX 
connections, and runs a SALT-based 
voice browser. When a call comes into the 
server, a telephony browser would kick in 
"as a proxy to speech-only clients," he 
said. The browser parses the incoming 
words and hands them to the speech 

► continued on page 20 



How Your Applications 
Can Earn Their Stripes 

AirClic links enterprise apps to bar codes 



BY EDWARD J. CORREIA 

If the devices in your organization 
don't run BREW, Java or Symbian, 
or if the carriers offering those 
capabilities don't provide adequate 
coverage on their networks, there's 
another alternative for mobilizing 
data-driven applications. 

Virginia- based mobile develop- 
er AirClic Inc. (www.airclic.com) 
offers a unique solution that per- 
mits developers to create links 
between bar codes in the field and 
their back-end data. Developers can use 
the system to let field workers input codes 
using a remote scanner or phone keypad 
to bring up data or launch as many as 
three other services or applications. 

Suren Gupta, AirC lie's executive vice 
president of operations and information 
services, described an application devel- 
oped by the Boston public schools that 
uses AirC lie to help police officers deter- 
mine where truant students are supposed 




You can launch 
apps from any 
phone, says 
AirClic's Gupta. 



to be. "They have a cell phone, 
and I provide them with a scan- 
ner and software components 
that can interface with our plat- 
form," he said. Once the stu- 
dent's code is scanned, the sys- 
tem queries the school's central 
database and sends back the 
student's class location. Gupta 
said the alternative requires 
officers to parse through an out- 
of-date printed report contain- 
ing upward of 65,000 names. 
According to Gupta, the system can 
work with any telephone, including 
land-line and mobile phones and Java-, 
WAP- and SM S-enabled phones. AirC lie 
also markets stand-alone scanners, scan- 
ner-enabled phones and a key-fob-like 
device that can scan and store about a 
hundred codes, and later upload them to 
a Windows PC via USB or serial inter- 
face for processing. 

► continued on page 20 
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* continued from page 19 

recognition engine, which fol- 
lows rules based on those words. 
Because it leverages existing 
Web services, SALT minimizes 
the amount of extra coding 
necessary to voice-enable those 
services, M astan said. "The 



application is [already] running 
in their environment; they don't 
need to add black boxes to run 
proprietary voice-only applica- 
tions. And on the development 
side, SALT is architected as 
an object-oriented, event-dri- 
ven programming model, so 
that Web developers will under- 
stand how to do it." 



M astan said SALT is similar 
in concept to VoiceXML. 
"There was a bunch of compa- 
nies [developing] proprietary 
[I VR ] platforms that got togeth- 
er to develop a standard for 
them to talk to each other and 
interchange data. VoiceXML 
was born to accommodate sim- 
ple I VR telephony applications. 



What it did not contemplate 
wastheWeb, multimodal appli- 
cations, graphical devices and 
interacting with visual and 
speech together. That's where 
SALT came in," he explained. 

"We consider [speech] to 
be the most natural form of 
user interface available," M as- 
tan continued. "And it's the 
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only interface common to all 
devices. Others, such as pen- 
based point-and-click and soft 
keyboards aren't. The industry 
is now starting to go from 
touch-tone menus to speech- 
in, speech-out only applica- 
tions," he said, with conver- 
gence of speech with devices 
as the next logical step. I 



STRIPES 



< continued from page 19 

The AirC lie system consists of 
three main parts, the first of 
which Gupta said handles code 
management. "We call it a code 
profile, but you can think of it as 
a high-speed switch that triggers 
a certain application," he said, 
adding that a user's profile can 
determine which applicationsare 
triggered. AirC lie stores code 
catalogs for all its customers on 
its own servers. These contain 
lists of all known codes for any 
company using the software, 
each of which can be linked to as 
many as three applications. 

Gupta described another 
example involving a pharmaceu- 
tical company linking its medi- 
cation codes to product infor- 
mation for doctors, another for 
patients, and perhaps a third 
for sales representatives logging 
orders. 

User profiles also can be 
linked to locale. "If a user is in 
Japan, he receives Japanese con- 
tent," which is processed and for- 
matted in XHTML for the client 
that requested it. This is per- 
formed by the rendering engine, 
the second major component. 
'The beauty of the system is that 
they can get the same informa- 
tion on a phone, PC or PDA," he 
said, adding that if the target 
device is Java-enabled, it can be 
programmed to both store data 
and perform preprocessing prior 
to sending a code, cutting down- 
load time. Gupta said the third 
major component is the develop- 
ment tools, which include a set of 
Java APIs for processing, manag- 
ing and administering scanned 
data and related services, and for 
monitoring events and usage. 

One significant downside to 
this solution is that it forces cus- 
tomers to rely on the solvency of 
AirC lie for a major portion of 
their application. To this, Gupta 
said: "We offer stability that 
can compete with the best out 
there in terms of the viability 
of our business." AirC lie was 
established in 1999 and has 85 
licensees, but has yet to show a 
profit, Gupta said. Pricing varies 
by user and traffic volume. I 
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EDITORIALS 

M ore Than 'Phone H ome' 

Wireless, wireless, wireless— to software development 
managers, it must seem that nearly every platform 
vendor has gone crazy for wireless client support. From 
the .NET Compact Framework to Java 2 M icro Edition, 
from Palm to RIM , handheld devices are all the rage in 
product literature, trade shows and positioning. 

But let's get two things straight. First, few enterprises 
truly have a mission-critical need to support small-foot- 
print wireless devices. Although one could concoct many 
hypothetical "wouldn't it be nice if..." sort of scenarios, 
there really are few cases where there's a compelling busi- 
ness need to broadly support mobile executives, employ- 
ees or customers. To a large extent, wireless adoption 
(beyond WiF i-equipped laptops) is being driven by the 
vendor and carrier community, not by enterprise need. 

Second, although large-format handheld devices such as 
the RIM Blackberry, Sharp Zaurus, Compaq iPaq (or is it 
the H P iPaq?) and Palm i705 are sleek, sexy and fun to play 
with, the truly ubiquitous platform is the cellular telephone. 

Granted, most handsets available today lack the capa- 
bility to locally execute downloaded applications. Yet, as 
the installed base of B R E W, J ava, Symbian and other tur- 
bo-charged phones into the mass market inexorably 
increases, the cell phone will likely be most organizations' 
first, best wireless development target platform, especial- 
ly for customer access. For internal use, many companies 
may find the cell phone to be an affordable, easy-to-sup- 
port platform, except in situations where larger screens 
and faster processors are a necessity. So, while pundits 
rave about the latest handheld computer, be sure not to 
leave the cell phone out of your wireless equation. 

And Source Code for All 

The Apache Software F oundation may not be a house- 
hold name, but its products— and source code— are 
front and center of modern-day enterprise software. I n 
many cases, developers are downloading its free Web 
server, Java servlet engine or other applications directly 
for business use. I n other cases, leading platform vendors 
are embedding Apache code inside their own commercial 
offerings. All that is backed by a hard-core team of volun- 
teers, arguably second only to the Linux community in 
their broad influence on enterprise computing. Indeed, 
with the obvious exception of the M icrosoft ecosystem, 
it's hard to find a part of the server-side development 
mainstream that isn't influenced by Apache. And even 
there, many Windows shops use pieces of Apache code, 
particularly its Web server. 

Why is Apache so successful? Because its team is prac- 
tical. The Apache license provides open-source enthusi- 
asts and contributors with safeguards to their intellectual 
property, while encouraging widespread adoption by 
powerhouses like IBM and Sun. Apache's pragmatic 
approach to open-source issues, combined with the obvi- 
ous technical excellence of its offerings, has given it moral 
authority to negotiate with vendor consortiums like the 
Java Community Process. Although it's staffed by volun- 
teers, and gives its source code away with few strings 
attached, the Apache Software Foundation is one of the 
most important influencers in the software development 
community today, i 



GUEST VIEW 



AN ENTERPRISE ARCHITECTURE VOCABULARY 



Following a speech at an 
industry conference on the 
subject of modeling and .NET, 
a fairly young programmer 
approached me to talk about 
how enterprise architecture fits 
into the .NET project he was 
working on. Enterprise archi- 
tecture is really helping us see 
how our class libraries relate to 
each other. 

I couldn't respond. 
Why? The programmer 
and I didn't share the 
same vocabulary or per- 
spective. We lacked a 
common foundation to 
talk about enterprise 
architecture. 

As I thought more 
about this, I realized 
that if I had asked nine other 
people attending this speech to 
define enterprise architecture, 
I would have gotten nine differ- 
ent answers. Object-oriented 
developers would talk about 
how enterprise architectures 
can horizontally link class 
libraries. Another programmer 
might define it as code con- 
struction. A software architect 
would describe blueprints for 
their existing IT data and sys- 
tems. Enterprise architects 
would delve into areas such as 
business goals, corporate meta- 
data, relational databases or 
Web services. 

These definitions illustrate 
that people define enterprise 
architecture through the nar- 
row context of their job, not 
from the enterprise level. 
Thus, they lack a key element 
of enterprise architecture: how 
information technology sup- 
ports the business goals and 
mission. 

Enterprise architecture is a 
blueprint that captures the cur- 
rent or future IT infrastructure 
as it relates to business goals 
and processes. In short, enter- 
prise architecture helps bridge 
the chasm that separates busi- 
ness and IT in an enterprise. 

Why should we care how 
enterprise architecture is de- 
fined? Because without a 
shared understanding of enter- 
prise software terms like this 
one, software professionals are 
missing the benefits of sharing 
best practices. 

Without agreement across 
the industry about the defini- 
tions of words such as enter- 
prise or architecture, it's harder 
to communicate, collaborate 
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and learn from each other. H ow 
can we leverage our common 
knowledge when we don't share 
a basic foundation of vocab- 
ulary? How can we choose 
the best development tools 
when we aren't taking an en- 
terprise view? And without the 
right tools to do the job, we are 
missing a huge opportunity to 
work smarter. 

Let me use an analo- 
gy: Suppose we were 
going to build a house. 
We would hire an archi- 
tect to design a blue- 
print, then review and 
approve the blueprint. 
We would hire a general 
contractor and subcon- 
tractors (plumbers, elec- 
tricians, etc.) and give them the 
plan so they could see how each 
part fits into the whole. We 
would make sure it is designed 
to meet our daily needs as a fam- 
ily. We'd approve a schedule and 
budget. As changes unexpected- 
ly arose, we could use the blue- 
print to figure out what went 
wrong and fix it. 

More important, we could 
seethe big picture— how all the 
pieces come together to build a 
house. 

Why doesn't the same hold 
true for technology? Compa- 
nies are willing to spend mil- 
lions on systems and applica- 
tions, often without a blueprint 
of how they fit into the enter- 
prise IT infrastructure or relate 
to corporate goals. Without an 
enterprisewide blueprint for 
shared discussion, how can we 
truly understand how individual 
projects fit together and ulti- 
mately benefit the company 
and its goals? 

n the developer side, a lack 
of agreement over an enter- 
prise architecture hinders our 
ability to develop best prac- 
tices. If we understand the dif- 
ferences between enterprise 
architecture and class libraries, 
we can better communicate 
with our colleagues. 

We can discuss our business 
goals and what technology is 
needed to meet those goals. We 
can identify and evaluate tools 
that will help us develop the 
technology to fulfill the goals. 
By selecting the right develop- 
ment tools, we can better lever- 
age our resources. 

We can better understand 
the impact of changes in busi- 
ness process on our technology 



infrastructure. This drives the 
establishment of best practices 
within the company and 
throughout the industry. 

The emergence of Web ser- 
vices further highlights the 
importance of understanding 
enterprise architecture. Dis- 
tributed systems are now be- 
coming more widely adopted. 
Web services are potentially 
more complex systems than 
anything else we have designed 
in the past 20 years. Technology 
blueprints at the enterprise lev- 
el can tie Web services to busi- 
ness goals and play a key role in 
helping companies harness 
Web services complexity and 
maximize its value. Yet how 
many ClOs and managers are 
discussing architecture as part 
of their Web services develop- 
ment process? 

A LESSON FROM UNCLE SAM 

We could learn from the federal 
government. ClOs at federal 
agencies are adopting enterprise 
architecture as the first step in 
their technology efforts, and are 
seeing firsthand the importance 
of an enterprise architecture as 
a way to understand their cur- 
rent complex IT processes and 
infrastructure and define a road 
map to their future. 

Because they are derived 
from business requirements, 
IT developers can build stron- 
ger, faster and value-producing 
systems that help the agency 
truly tie technology to business 
goals and eliminate system 
redundancies and foster infor- 
mation sharing and collab- 
oration between departments 
and agencies. 

We must do the same on the 
corporate side. We should seek 
ways to share and leverage our 
common knowledge, starting 
with a common vocabulary for 
enterprise architecture. 

Only when we have achieved 
an industrywide shared devel- 
opment process, like the con- 
struction industry with its met- 
rics and benchmarks such as 
blueprints and building codes, 
will we be able to develop tech- 
nology that is more efficient, 
effective and requires less 
rework. Let's work together to 
take the first step and define 
enterprise architecture so we 
can all understand its value. I 

Jan Popkin is founder and CEO 
ofPopkin Software. 
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COMPONENT MARKET ALIVE 

Your special report ["Compo- 
nent Reuse: Does Anybody Get 
It?" April 15, page 16, or at www 
.sdtimes.com/news/052/speciall 
.htm] was good, but I think you 
should be a little more careful 
when you check your sources 
next time. 

I don't know where [Rational 
Software Corp.'s] Alan Brown 
got his facts, but he is way off 
the mark when he says that the 
commercial component market 
is largely owned by Compo- 
nentSource and F I ash line Inc.: 
"They're the only two major 
companies making significant 
money; it's a hard area to make 
money in, and a lot of companies 
have gone under." 

As the founder and CEO of 
a 7-year-old pure-component 
company (and seven years in 
our business means quite old), I 
can tell you that nothing is fur- 
ther from the truth. 

F irst of all, both these com- 
panies are just resellers of 
components, and while Com- 
ponentSource does a rather sig- 
nificant amount of business for 
us and others, Flashline is 
largely irrelevant. 

Second (and I can't believe 
you missed this), any relevant 
component vendor will tell you 
that most of the component 
reselling in the U .S. is done by 
Xtras, a pure-component re- 
seller with the leading com- 
ponent catalog in the U.S. 
(VBxtras), and Programmer's 
Paradise, a public company 
that sells components and other 
developer software. A quick 
look in their lOKs will probably 
give you better information 
than the speculation that you 
got from M r. Brown. 

And third, yes, it's a hard 
area to make money in, but we 
have managed to grow more 
than 50 percent per year for 
seven years running. 

Gent Hito 

President and CEO 

N Software I nc. 

I was disappointed after read- 
ing "Component Reuse: Does 
Anybody Get It?" The central 
themes were: 1) few developers 
are reusing components, 2) few 
commercial components are 
available, 3) few components 
are general enough, and 4) few 
component vendors are making 
any money. Based on my ex- 
perience as founder and CEO 
of Xtras, a component market- 
place for M icrosoft-centric 



developers, I believe nothing 
could be further from the truth. 

Rational's Alan Brown's state- 
ment— "[C omponentSource and 
F lashline are] the only two major 
companies making significant 
money"— was flawed. Xtras is 
making significant money, and 
based on our competitive 
research, I would speculate 
Xtras' revenues are on par with 
or greater than each of these 
companies. 

Next, I object to the notion, 
asserted by John Parker of 
Kinetic Information, that the 
component supply is lacking. 
Those same 250-plus vendors 
offer a diverse set of compo- 
nents: user interface, reporting, 
charting, document imaging, 
medical imaging, compression, 
encryption, Internet protocols, 
database, PD F, OLAP and more. 

Last, the logic in comments 
made by G reg Sherman of L og- 
icL ibrary was faulty. H e asserts 
that enterprises' need to cus- 
tomize commercial compo- 
nents for their specific business 
logic is why "in-house develop- 
ment is fundamentally better." 
This assertion belies the fact 
that project managers are mak- 
ing build-versus-buy decisions 
and even when customization is 
required are choosing to buy 
$300-plus components instead 
of letting developers build less- 
er functional solutions costing 
upwards of $10,000. Clearly, 
enterprises should buy compo- 
nent functionality whenever 
viable; if not, every enterprise 
would also be developing oper- 
ating systems and office pro- 
ductivity applications. 

Mike Schinkel 

CEO 
Xtras I nc. 

C++ WORK IN PROGRESS 

Perhaps I 'm missing something 
in Andrew Binstock's column 
["Cross-Platform GUIs on the 
QT," April 15, page 29, or at www 
.sdtimes.com/cols/middlewatch 
_052.htm], particularly toward 
the last line, which says, "When 
you consider that Visual C++ and 
Visual Basic programmers will 
need to make substantial changes 
to run existing code on M icro- 
soft's .NET, examining Qt might 
suddenly make a lot of sense." 

Rather than go directly to the 
API set and attempt production- 
level application design, why not 
adopt a genuine RAD environ- 
ment that is designed for cross- 
platform development? 

I was a little surprised that in 



an article specifically focused 
on cross-platform development, 
there was no mention of Bor- 
land's cross-platform tool sets, 
which were introduced in J anu- 
ary 2001. We found much the 
same opportunity in Qt as 
was mentioned in the article, 
prompting our investment in 
the company and arranging to 
use the Qt libraries as the foun- 
dation for CLX, the Com- 
ponent Library for Cross-Plat- 
form, which enables Delphi 
and Kylixto maintain a 100 per- 
cent code-compatible interface 
to the developer. 

Originally we offered Kylix in 
a Delphi-language-only form, 
but we have recently announced 
that work is in progress to pro- 
duceaC++ version that will inte- 
grate with our C ++ B uilder prod- 
uct for Windows, providing C++ 
developers a simple, effective 
means to address both platforms 
with a minimum of extra effort. 

Particularly in the case of 
the Visual C++ and Visual Basic 
programmer, the Kylix/Delphi 
set comes in mighty handy. It 
offers a complete property- 
method-event programming 
model similar to the familiar 
environments found on Win- 
dows, and is entirely cross-plat- 
form code-compatible between 
Linux and Windows. 
Thomas J. Theobald 
Technical M arketing 
Manager, RAD Tools 
Borland Software Corp. 

Andrew Binstock replies: I 
should have been clearer that 
the cross-platform capability I 
discuss is for mainstream lan- 
guages, that is, languages sup- 
ported by more than one ven- 
dor. Had I included languages 
like Borland's Object Pascal, I 
would have felt duty-bound to 
include Eiffel, which is more 
portable and enjoys a better 
object model, as well as other 
specialty languages that enjoy 
unique advantages over main- 
stream counterparts. 

I am anxious to see Borland 
execute on the cross-platform 
strategy for C+ + that you men- 
tion, and which was covered in 
the Feb. IS edition ofSD Times. 
Shipping that will provide an 
important cross-platform tool. 

WEB SERVICES NIGHTMARE 

Regarding your editorial "A 
Potential Nightmare" [April 1, 
page 26, or at www.sdtimes.com 
/opinions/opi nion_051.htm], 
here is some feedback: 

"...COM components. In 
most cases, these are few and 



far between." For a lot of appli- 
cation and corporate develop- 
ers, relying on commercial bina- 
ries is a way of life. Even shops 
that roll their own components 
often rely on third-party con- 
trols and components. Often, 
these components have depen- 
dencies that branch down into 
lower-level components, or the 
OS itself. A user may install 
software at any time that could 
destabilize one of your compo- 
nents (a patch or OS upgrade, 
for example or rival software). 

"...testers or developers can 
isolate and certify the binaries 
before incorporating them into 
an application." This doesn't 
seem to happen too often; the 
decision to buy usually implies 
a trade-off between time and 
money. Developers seem to 
choose tools that they've used in 
the past, or from vendors they 
trust. But they don't reverse- 
engineer them to make sure 
they're unbreakable. So what 
happens if a component breaks? 
The developer could work 
around the bug. Or look for a 
patch, or submit a case to the 
manufacturer and wait. M aybe 
buy a competitor's component. 
At any rate, you have to integrate 
and redeploy the component. 

"Not only can't you see 
inside the Web service to see 
how it works, you can't even 
control its release cycle." This 
applies equally well to compo- 
nents. What if you've relied on 
a component that works well 
on one OS version, but all of 
your customers have upgrad- 
ed? You don't have the source. 
W hat if the vendor changes the 
terms of your license? Web ser- 
vices arejust like any third-par- 
ty dependency: They require a 
strong relationship with your 
vendor. Trust, reputation and 
the terms of service spelled 
out, with all expectations and 
contingencies. 

Donald Bleyl 

Charlatans take advantage of 
stupid people and sometimes 
even dupe normally intelligent 
people. In the absence of mal- 
ice, intelligent people will 
sometimes overlook details and 
make mistakes. Caveat emptor! 
Why should a Web service be 
any different than a hard good? 

► continued on page 25 

Letters to SD Times must include the 
writer's name, company affiliation and 
contact information. Letters become 
the property of BZ Media and may be 
edited. Send to feedback@>bzmedia.com, 
or fax to 516-922-1822. Please mark all 
correspondence as Letters to the Editor. 
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Everybody s focused on exposing applications as 
Web services while letting someone else figure out 
how to connect them. We're that someone else. 



Integrate with ease, extend at will. 
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Most companies are focused on 
exposing individual applications 
&s web services, but haven't 
yet considered how to effectively 
integrate Dr manage them. And 
that's no sma'l task. 

$OfiiCXQ l$ the first product to 
deliver on the vision of the 
Enterprise Se'vice Bus: a standards - 
based, service - oriented architec- 
ture that reliably wm securely 
Integrates enterprise applications 
through We^j services and JCA 
technologies. SoricXQ includes 
configurable XM|. processing 



services that allow applications 
and business pawners to easily 
interact over the SonicXQ bus r 
elirnnatmg the need for point- 
to-point integrations and the 
expensive centralized solutions 
thai implement then. 

And because SonicXQ is built 
upon the proven So-rfcMQ* 
messaging backbone, it 
provides end-to-end re lability 
and comprehensve security 
between services. Our patent- 
pending Dynamic Routing 
Arch i tenure 11 * ensures that 



web services and distributed 
processes can scale to meet 
the demands af today's global 
enterprises. 

Capitalize Dn the promise of 
Web services right now with 
SonicXQ, After a hj what good 
is ii Web sHi-uice if it's an 
Island unto itself? 
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INSTANT MESSAGING NOW ENTERPRISE TOOL 

It was bound to happen. Every moder- 
i 



I ately new form of communication gets 
used by the fringe, the outlaws, the gad- 
get aficionados, the wheeler dealers and 
finally business workers, in more or less 
that order. This progressive adoption 
long predates the advent of computers. 

It is believed, sometimes averred, 
that the first book printed with movable 
type after Gutenberg's Bible was what 
passed for pornography in the 15th 
century. M ore recently, we know that 
the widespread acceptance of video- 
tape was a result of pornography's early 
embrace of the technology, likewise 
many of those techniques used by sites 
that require you to acknowledge their 
ads when browsing. Although pornog- 
raphy has served my purpose here, the 
larger point is that communications 
technology has generally been accepted 
by business after previous adoption by 
consumers. 

Instant messaging (IM) is the next 
technology to make this transition. To- 
day, employees within corporations are 
beginning to use I M to perform standard 
business functions, such as quick com- 
munications to supplement workflow 
tools (or sometimes in lieu of them) and 
for project management or simply to get 
around the delays inherent in other 



forms of communication. Recently, for 
example, a group of eight Wall Street 
powerhouses (C S F irst Boston, Goldman 
Sachs, JP Morgan, Lehman Brothers, 
M errill Lynch, M organ Stanley, Salomon 
Smith Barney and UBS Warburg) imple- 
mented an IM system among their 
bond-trading divisions. In the system, 
traders, dealers and customers can all 
use IM for direct one-to-one communi- 
cations. The goal is greater re- 
sponsiveness to customers. The 
participating institutions view 
the added capability of direct 
customer communication as a 
competitive benefit that will 
distinguish them from other 
institutions that don't offer this 
level of responsiveness. 

Two months ago, the U.S. 
Navy announced an implementation of 
IM among allied ships in the Persian 
Gulf. Using Lotus Domino's Sametime 
IM product, sailors and officers on 
one ship can communicate back and 
forth in near real-time with those on 
another. Prior to this IM project, if a 
ship wanted to borrow supplies from a 
nearby allied ship, the request would 
have to go up the command chain on 
the sending ship and down the com- 
mand chain on the receiving ship. A 



MIDDLEWARE 
WATCH 




simple reply of "Yes, we have no 
bananas" would need to pass through a 
similar gantlet to be received. Since 
the Navy system— like the Wall Street 
system— has built-in automatic log- 
ging, encryption, a limitation on who 
can participate and a block on aliases, 
the need to vet every message before 
sending it is removed. 

Today, consumer-side IM is a com- 
mon thing. N ews coverage of the AOL - 
versus-M icrosoft wars on the messag- 
ing standards has been fodder for the 
industry rags for much of the 
past year. IM , however, is now 
increasingly moving behind the 
firewall. Everyone in the com- 
pany can use IM with col- 
leagues in the same domain. 
This facilitates certain kinds of 
contacts: urgent ones and those 
too short for running through 
the e-mail systems. Urgent 
messages we all understand. Short 
texts, though, represent a factor that 
will likely determine how much IM 
corporations are willing to deploy and 
the rules for deployment. In pure e- 
mail systems today, the IM function is 
handled bye-mail. It shows up in those 
messages that consist entirely of a 
"thank you" or a smiley face or other 
single-word replies to previous mes- 
sages. If these e-mails migrate to IM , 
they invite the next step: chatter. And 



here, IT managers and busy employees 
worry. If IM becomes a chatter port, 
then the mass of unimportant messages 
that overwhelm e-mail will hijack IM, 
destroying its benefits and turning it 
into another small way of ruining pro- 
ductivity. IM spam is a very logical 
extension of this. 

However, if managers require that 
IM be limited to urgent messages or, 
let us say, customer contacts, then 
there is a high likelihood that it will 
become a useful even required tool in 
the enterprise. It will be the equivalent 
of e-mail with an "urgent and brief" 
stamp on it. 

I M started as a grass-roots movement 
in 1996. Now it's an established way for 
consumers to communicate in chat 
rooms, cybercommunitiesand by phone. 
As people accustomed to IM enter more 
fully into the work force, they will bring 
IM with them— thereby accelerating the 
adoption adumbrated by the pilot pro- 
jects discussed previously. If company 
policies can keep IM as a productive 
means of communication, then man- 
agers should expect in the next year or so 
to begin needing to accommodate this 
technology in their plans. Shortly there- 
after, it will creep into programming 
requirements. Trust me. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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As your article points out very nice- 
ly, the media is glossing over the nega- 
tives. But then, the technology is still 
maturing, so maybe this is not a flaw to 
be alarmed about because the final 
analysis will have taken care of this (the 
optimistic view). The value of good 
business analysis, technical design and 
code reviews should negate much of 
the worry that this article concerns. 
But herd mentality always seems to 
prevail, and there is never enough 
room in a schedule. 

As I see it, the article's main point is 
actually part of a larger problem: How 
does an enterprise manage compo- 
nents? If you are developing compo- 
nents but not tracking these things, how 
can you expect to be successful using 
components outside of your control? 

There's a much larger management 
issue looming and no one knows what to 
do about it. The solution will not be a 
tool that can be bought off a shelf some- 
where, either. 

Bruce MacDonald 

Systems Architect 
Scottsdale Insurance Co. 

TESTING FOR THE WEB 

Regarding your special report "Software 
Testing: The Internet Changes Every- 
thing" [April 1, page 22, or at www 
.sdtimes.com/news/051/speciall.htm], 
you really tell it like it is. I'll bet some 



managers are already making moves to 
get some of this stuff off the ground. 

Maybe the following questions will 
be fodder for another article, say a fol- 
low-up to this. W hat do these tools cost? 
Who has them? What do they do? What 
kind of training is available? And, who'll 
benefit from them? 

Mark Gustafson 

IF A STEAK IS WHAT YOU WANT... 

Steven J. Vaughan-Nichols' column "Java 
Programming, Cajun Style" [April 1, page 
31, or at www.sdtimes.com/cols/javawatch 
_051.htm] is amusing, especially the 
M icrosoft spectacle. 

You end with "Wouldn't you want to 
try an IDE and framework that could 
get higher-level work from your rank- 
and-file programmers? I would." 

Well, I do not agree with that. You 
cannot make business, information 
frameworks or business dependencies 
easier than they are. If users (here, your 
programmers) don't understand the 
underlying business needs and vital 
operation logic of the client's industry, 
they will do "blind programming." 

On the other hand, I do agree that a 
single, talented individual can eventual- 
ly perform better with optimal tools and 
a comfortable working environment. 

My point is that it is dangerous to 
assume a different tool could make a 
steak out of a sausage. If you think of a 
steak, get yourself a steak and not a 
sausage. It's the same with employees. 

Max-Philipp Blickenstorfer 
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PR -Tracker helps manage sdtware 
development precis by tracking software bugs 
with problem reports. \'~H- racks' recces o"ooeTi 
reports in a network database that sunsets 




Bug tracking 
doesn't 
have to be 
complicated! 


siriul.aneous access by molbp-le users, t-ea.ures 
classification, assignment, sorting, search ic, 
reporting, access control, user permissions, 
attachments and email notification. Sussors easy 
configuration o J data collectJon and *vo r «fow 
on a project by project basis. Redundant dabs 
storage for speed and da:a corrupt o" recovery. 

PR-Tracker Web Client p^-.. -n. 

bug :rac<ing over :he "lernet or R" int r a n e1 wit" 
tie sane easy-to-use W "cows interface and 
features of 1 3 K- r r ecke r . Supports anonymous 
access, aut"e n tication confo , a."C secure "Itss 
protocol. 

ProblemRepOrt.asp enables customers 
to enter problem reports Into a ::; <-lrac«er 
database using a browser. A great *way to 
implement beta test bug reporting or customer 
support. Customize mis web page to collect tie 
da-.a you want and :o match -he loo< c/ 1 your 




company website. 

Download 

www.prtracker.com 

By Softwise Company 
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WS-I: ANOTHER STANDARDS RATTLE DEGINS 



Just when we thought that Sun and 
IBM were going to make nice with 
each other ("Can't We Just Get Along?" 
M ay 1, page 35), it starts anew, over 
what kind of membership Sun should 
have in the Web Services I nteroperabil- 
ity Organization (WS-I). And the villains 
of the piece? M icrosoft and I BM . 

I sn't it bad enough that despite all the 
Web services hyperbole, the simple 
truth is that all of the key Web services' 
protocols are drafts. I mean, what is 
SOAP anyway? I'll tell you what it is. It's 
a W3C draft. Let me repeat that: draft. 
Not final. Not finished. Draft. 

WSDL?lt'saW3C draft, too. UDDI? 
It's also a work in progress, except in- 
stead of having the W3C behind it, it's 
got a consortium of beefy companies 
working on it. And, they come right 
out and say on their site that they're not 
a standards organization. So what does 
that make UDDI? Chopped liver? It 
had better be a standard, or there will 
be lots of Web services interactions fail- 
ing. And ebXML, it's got the United 
Nations and the Organization for the 
Advancement of Structured Informa- 
tion Standards (OASIS) supporting it. 
Who'd have thought it? The United 
N ations as a technology standards orga- 
nization. What next? The Boy Scouts of 



America's BSAXML? Oh, and it's not 
finalized either. 

Anyway, the point is not only are Web 
standards in a state of flux, they're also 
not being coordinated with one another 
even though they must work together if 
Web services are to get anywhere. Off 
the top of my head, I can't recall ever 
seeing such a confusing mess of stan- 
dards being bound together in one 
major industry initiative before. 

Given all that, the WS-I 
sounds like a great idea. Some- 
one has to make sense of it all, 
and who can argue with a mis- 
sion statement like this one: 
"The organization's deliverables 
are targeted at providing re- 
sources for any Web services 
developer to create interopera- 
ble Web services, and verify that their 
results are compliant with both industry 
standards and WS-I recommended 
guidelines." And the group itself is an 
"open industry effort chartered to pro- 
mote Web services interoperability 
across platforms, applications and pro- 
gramming languages." 

That's too wordy, but the idea is 
good. Unfortunately, when IBM , M icro- 
soft et al. had this party, they didn't 
invite Sun until the last 48 hours. I n fact, 
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as I write this, Sun's not even a member. 
Instead Sun and the WS-I (read IBM 
and M icrosoft) are fussing over what 
role Sun can play in the WS-I . 

Sun wants on the board. It feels it 
deserves it. And rightfully so. Sun has 
always been a big supporter of Web ser- 
vices, and, of course, is the owner of the 
Java specifications. IBM and Microsoft, 
on the other hand, want Sun to be 
involved with WS-I as a "contributor." Is 
that so bad? Well, Sun looks on this as 
being a second-class citizen, and I can't 
argue with that. 

Just look at the other board 
members, Accenture, H P and 
SAP. Sure, they're important 
Web services supporters, but 
they're not even in the same 
league with Sun when it comes to 
shaping the technology. I mean, 
come on, .N E T and J 2E E -based 
servers will be the foundations 
of Web services, and if M icrosoft is 
there with .NET, Sun should be there 
forJ2EE. 

Some people are arguing that 
there's a grand conspiracy, led by IBM , 
to use the WS-I as a way to isolate Sun. 
Indeed, David Berlind of ZDNet 
argues that this is part of an IBM plan 
to first wrestle control of Java from Sun 
and even to eventually buy out Sun 
(http://techupdate.zdnet.com/techupdate 
/stories/main/0,14179,2860393,00.html). 



Now, that sounds far-fetched to me. 
I 'm sure some people might think that 
adding Java and the JCP, Solaris and 
SPARC processors to the IBM portfo- 
lio is just what Big Blue needs, but I 
can't see that being IBM's corporate 
strategy. I think it's far more likely that 
the Sun WS-I snub was a stupid mis- 
take by a few misguided IBM execu- 
tives—with Microsoft eagerly urging 
them on. Let's face it, anything bad for 
Sun and Java is going to be better for 
M icrosoft and .NET than it is for IBM 
or anyone else. 

F or those of us who don't have massive 
stock holdings in any of these companies, 
what's really annoying here is that a polit- 
ical fight has all the hallmarks of turning 
into a standards war. Up until now, I've 
been impressed with how well everyone 
was cooperating over the wild and wooly 
mix of Web services standards. 

It seemed too good to be true. I 
guess it was. I f we do indeed have Web 
services standards wars, the whole con- 
cept is in deep trouble, and you can for- 
get about the technology becoming a 
universal middleware play. It will be 
back to software development as usual. 
Darn it. I 

Steven J. Vaughan-Nichols has been writ- 
ing about technology for more than IS 
years and also has worked as a program- 
mer for NASA and the Dept. of Defense. 
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PHYSICALLY SECURE 



Web development has always had its 
limits: limits to what you can deliver 
to a browser, limits to what you can expect 
for bandwidth, limits to the kind of infor- 
mation you dare transfer, limits to security. 

Some of those limits may remain with 
us for some time. The last-mile con- 
straints on bandwidth aren't going away 
any time soon, especially with telecom 
companies dropping like flies in a spray of 
Raid. Browser limits depend on Micro- 
soft, which is a subject for another time. 
There also are limits to how safe the infor- 
mation you handle can be, but those turn 
out to be good limits. 

As it happens, a series of new devel- 
opments at the Los Alamos National 
Laboratory has produced encryption 
that cannot be cracked. Period. If you 
use the techniques developed by Dr. 
Richard Hughes and others in the 
physics division there, your information 
is protected by the very fabric of the uni- 
verse. It cannot be cracked without vio- 
lating the laws of physics. 

To start things off, Hughes and his col- 
leagues found a way to imprint informa- 
tion on subatomic particles. In this case, 
they're using photons. The way this infor- 
mation is imprinted is by fixing the polar- 
ization of an individual photon, so that 
(for example) vertical polarization would 
represent a binary 1, and horizontal polar- 
ization a 0. Photons also can be polarized 



diagonally, with diagonal opposites repre- 
senting the 1 or of a binary number. 

Once encoded, these individual pho- 
tons are transmitted to a receiver that 
reads the polarization, and from that, 
determines the information contained on 
the photon. Each photon carries one bit 
of information, so to read the information, 
you have to capture each photon in order 
and choose the right type of 
polarization. This alone makes 
transmission fairly secure. If you 
guess wrong on the proper polar- 
ization, you can't go back and 
check the other choices— this is 
prevented by the Heisenberg 
Uncertainty Principle. 

Worse, because each bit is 
carried on only one photon, you 
have to know where to find each one, in 
order. Even if you manage to find them, 
you then have the problem of reading 
them without the receiving station know- 
ing about it. After all, if you intercept the 
one photon carrying a bit of information, 
that bit stops there. The information 
doesn't get to the intended receiver at all. 
You could, of course, retransmit the pho- 
ton, but even there comes a problem. 

You see, Heisenberg's principle also 
says that the mere act of observing a sub- 
atomic particle changes it. Capturing a 
photon and then sending it along includes 
the process of observing it if you're going 
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to try to determine the polarization. As a 
result, the photon is changed in ways that 
can be detected by the receiver. 

So, any attempt to hack into the infor- 
mation stream is doomed. First, you'd 
have to guess right on the polarization for 
every photon, and second, you'd have to 
observe the characteristics without chang- 
ing the characteristics of the photon. Both 
are prevented by the laws of physics. 

But just in case someone does guess 
right, the type of polarization of each pho- 
ton is determined randomly. This 
makes guessing correctly unlikely. 
So what do H ughes and his 
group do with this? Currently, 
they're delivering secure encryp- 
tion keys of virtually any length. 
This works because each key is 
used only one time, it's impossi- 
ble to crack, and as a result, the 
information contained in the 
encrypted transmission is completely safe. 
U ntil recently, quantum key distribu- 
tion was available only for transmission 
over fiber-optic cable. Now, however, 
that's changed. Hughes, working with a 
group of astronomers, has found a way 
to adapt quantum key distribution to 
wireless transmission. H ughes says that 
he's been able to use it in daylight over 
long distances. H e says that it's possible 
to use it to send totally secure data 
between ground stations and satellites, 
and that he's found a way to send indi- 
vidual photons between the earth and 
satellites with very little loss. 



But suppose someone does find a 
way to intercept those individual pho- 
tons? Again, the message is still secure. 
According to H ughes, the changes in the 
photons made by the process of observa- 
tion make the bit error rate of the data 
stream become very high. As soon as this 
happens, the key transmission can be 
abandoned, and a new key transmitted. 
As a result, any attempt to intercept a 
secure key transmission will not only fail, 
but will be detected. 

Sounds pretty far-fetched, doesn't it? 
It's not. A Swiss company, id Quantique 
(www.idquantique.com), is already sell- 
ing a fiber-based quantum key distribu- 
tion device. Hughes says that at least two 
companies are planning to build wireless 
quantum key distribution devices. And 
at least two such networks are already 
running in the U.S., one near Boston 
and one near Washington, D.C. 

Now, at last, you can be completely 
confident that your key distribution is 
secure. Whether the rest of your data 
transmission is secure depends on more 
traditional measures, such as making sure 
the communications facilities themselves 
are secure, that the people you hire can be 
trusted, and so on. But you already know 
how to do that. W hat's new is that you can 
be certain no one can get your encryption 
keys by tapping into your transmissions, 
and that's now become a certainty. I 

Wayne Rash is a technology journalist 
and consultant. 



HAILSTORM IS DEAD, LONG LIVE HAILSTORM 2 



Ding dong, the witch is dead. When 
Hailstorm was originally released, 
M icrosoft described the initiative as "a 
set of enabling services that were 
intended to advance the M icrosoft .NET 
strategy and enable developers to build 
user-centric XM L Web services that 
offer a new level of personalization for 
both consumers and business users." 

Real-world translation: We want to 
manage your personal online informa- 
tion (if you're a consumer), or we want 
you to pay us for sitting between you and 
your customer (if you're a business) and 
managing the information flow of that 
relationship. Now I won't mention who 
in these hallowed pages predicted that 
M icrosoft would encounter a trust issue 
with this endeavor, but he wasn't alone: 
It's fairly obvious that the recent public 
hearings in the M icrosoft anti-trust case 
have caused some fallout with Red- 
mond's potential partners. 

Hailstorm— later renamed .NET My 
Services— was, indeed, an exciting con- 
cept. A central transaction database cou- 
pled with the .NET technology frame- 
work presented all kinds of new 
possibilities, particularly in that hottest 
of buzzwords: m-commerce. And while 
I'm trying to gloat, my original sweat ses- 
sion with this concept actually revolved 
around Redmond's protecting itself. 



Any such data store hosted by 
M icrosoft was going to be the most 
sought-after target in the Wild Cyber 
West, and M icrosoft's ability to protect 
itself from such shenanigans simply 
hasn't been up to snuff. Its liability risk 
with Hailstorm was simply impractical. 
Soon after that missive, however, M icro- 
soft announced a stringent new 
internal concentration on secu- 
rity, including several initiatives 
directly related to .NET. So I 
shut up, but I still hated the idea 
and I wasn't alone. 

But according to news and 
analyst sources, what caused 
Microsoft to stop Hailstorm 
wasn't a lack of trust in 
M icrosoft's security technology 
as much as it was a lack of trust in 
M icrosoft's ability to play fair with part- 
ners. Even behemoth potential Hail- 
Stormers like American Express and 
Citibank seem to have taken what we've 
heard at Redmond's anti-trust hearings 
to heart. They're worried about what 
might happen once M icrosoft has its 
tendrils firmly around their customer 
base. You can't blame them. Swimming 
with a shark is dangerous business. 

The question now for .NET devel- 
opers, however, is what's going to hap- 
pen with their newly adopted frame- 
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work. .NET My Services was publicly 
described by Bill Gates as the "most 
important" of all the .NET building block 
services. Does the halting of Hailstorm 
cripple .NET? Heck, no. Architecturally 
speaking, .NET is still just as powerful a 
development environment as it ever was, 
especially when it comes to Web services. 
All that's changed isthat H ailStorm trans- 
action and authentication won't be a 
ubiquitous part of that arrangement, 
which is undoubtedly better for 
both developers and M icrosoft in 
the long run. I stand by the con- 
viction that a full implementa- 
tion of Hailstorm would have 
backfired hard on both users and 
sellers, so seeing it retired actual- 
ly strengthens my optimism for 
.NET'S future. 

And remember that while 
Hailstorm is DOA, its poorer 
cousin Passport is alive and well in Red- 
mond's product strategy. Indeed, 
Microsoft's just-released Commerce 
Server 2002 is a perfect example. This 
whole release is almost entirely about 
integrating CS2002 more closely with 
the .NET Framework, Visual Studio 
.NET and .NET'S ancillary services. 
CS2002 now can integrate directly into 
theVisualStudio.NET I D E , and to bet- 
ter exploit that capability, it also has 
received an Application Runtime, Base 
Class Library and Common Language 
Runtime Interoperability Layer so you 



can build CS2002 applications using 
Active Server Pages .N E T and the .NET 
Framework. And the software also inte- 
grates with Passport, ostensibly to pro- 
vide single sign-on authentication capa- 
bility. So the option is still there; it'sjust 
not based on Hailstorm. 

The kicker is that caution may not 
even have been M icrosoft's central moti- 
vator in canceling H ailStorm. Turns out 
that Redmond and IBM have been 
working on a new Web services security 
and authentication scheme called WS- 
Security for quite some time now. WS- 
Security is only in the early stages, how- 
ever, and concentrates right now on 
message-based security. The present 
proposal defines only the core require- 
ments needed to protect a message and 
the mechanisms for tying security char- 
acteristics with that message. 

But even in its infancy, WS-Security 
has a bright future. It's based on all the 
right XML -oriented protocols (SOAP, 
WSDL, XML Digital Signatures, etc.), 
so you know future spinoffs will inte- 
grate easily with .NET, and what's more, 
it's got the backing of trusty old Big Blue 
so partners and customers won't feel like 
they're paddling alone in a pool with 
Jaws. Hailstorm may be dead, but its 
progeny is already out of the womb. I 

Oliver Rist is a freelance technology 
journalist and vice president of technol- 
ogy at AIC Inc. 
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SEMICONDUCTOR INDICATOR AT 16-MONTH HIGH 



Losses, layoffs and business problems 
within the technology sector are 
continuing— and only a few months 
after pundits began predicting that the 
global recession is over, and that recov- 
ery might be seen in mid-2002. While 
that still may be the case in some tech- 
nology-driven market sectors, such as 
pharmaceuticals or military/aerospace, 
in many other areas the bad news con- 
tinues to outweigh the good 
news. But indications are that 
the news is getting less bad. 

The slow second-quarter 
recovery (or lack of recovery, 
depending on your interpreta- 
tion) is fueled, in part, by the 
fact that everyone in the value 
chain has money troubles. That 
results in delayed or canceled 
orders, as well as lack of interest in new 
product lines. Separately, many start-up 
companies have found it difficult to 
raise venture funding for operations 
and R&D, or to cover cash-flow short- 
ages during the recession. Even though 
interest rates are low, working capital 
is hard to acquire. That delays the 
introduction of new, compelling prod- 
ucts that might jump-start consumer or 
enterprise spending. 

While the news appears 
gloomy, and a mid-2002 
recovery seems unlikely, 
there are indeed signs 
of life, beginning at the 
very bottom of the food 
chain: the semiconduc- 
tor market. For example, 
Applied M aterials Inc., 
which makes semicon- 
ductor wafer fabrication 
equipment and supplies, is 
rocking and rolling, with a 
stock only slightly below its 
52-week high. 




Another indicator is a key market 
index, Semiconductor Equipment and 
Materials International's book-to-bill 
ratio. SEMI is a consortium of semi- 
conductor manufacturers, and its index 
compares the number of new chip-mak- 
ing equipment orders place (booked) 
with the number of existing orders 
filled (billed), as a three-month average. 
That equipment is used to make chips, 

which in turn are used to build 

equipment such as networking 

and telecom gear, consumer 

electronics and other embed- 
ded systems, and standard IT 

equipment such asdesktop PCs 

and servers. 

Beginning in January 2001, 

the book-to-bill ratio fell below 

1.0, showing pessimism on be- 
half of chip manufacturers, and contin- 
ued declining through April 2001, 
when the ratio hit 0.44. At that time, at 
the peak of the recession, only $44 
worth of new orders were placed for 
every $100 of new chip-making equip- 
ment delivered. 

The following month, May 2001, 
the index began crawling upward 
again, and late last month, SEMI 
reported that for the three months 

Semi conduct or Equipment Baok-to-Eill Ratio 



ending in M arch 2002, the index stood 
at 1.04. While this remains a far cry 
from SE M I's healthier days— only two 
years ago, in M arch 2000, the book-to- 
bill ratio was 1.46— the fact that chip 
makers are buying new equipment 
implies that they're expecting to 
receive a lot of new orders from equip- 
ment manufacturers. They need to buy 
a lot more: In March 2002, they 
ordered $839 million worth of new 
equipment, compared with $1.2 billion 
in March 2001. 

As chip makers gear up production, 
they'll fuel new hardware development 
and server sales to enterprise data cen- 
ters and ASPs. E nterprises, in turn, will 
increase their outlays for software, dri- 
ving sales of tools for both in-house and 
ISV development. Sure, it's a long path 
from orders for new chip-making 
equipment to the world of compilers, 
J2EE and .NET application servers, 
application frameworks and I D E s. Still, 
the drastic improvement in SEMI's 
book-to-bill ratio is a positive sign that 
the end of the high-tech recession may 
finally be in sight, leading perhaps to a 
recovery of the software development 
market in the first half of 2003. 1 

Alan Zeichick is editor-in-chief of SD 
Times. David Rubinstein will return 
next issue. 
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If Developing a Wireless App r Would You 
Be Likely to Outsource the Development? 
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Compared with ordinary client, client/server or n-tiered development, wire- 
less development is a potential nightmare. Client devices might be any size or 
shape, with connections that range from slower-than-modem speeds to high- 
speed 802.Ha/b Ethernet. Clients might have a full keyboard, a few odd but- 
tons or just a screen; the screen itself can be large, small, color or black and 
white. Add to that the plethora of embedded microprocessors, operating sys- 
tems, small-scale runtime environments and limited memory, and you end up 
with more than the average enterprise developer can keep track of, let alone 
master. And let's not even get started on transport protocols and middleware. 
One solution: outsourcing development of wireless applications to spe- 
cialists. By outsourcing wireless development, enterprise IT managers would 
not have to keep on top of a multitude of devices that need to be managed, 
and standards and middleware issues that need to be addressed. Attractive 
as this may sound, Evans Data Corp.'s Winter 2001 Enterprise Development 
Management Issues study revealed that only about one in five development 
managers would definitely or probably outsource wireless development. 
vul«- ■ ifmy muter xa ftmiif&fitrs, 



Collaborative solutions provider SiteScape Inc. has 
received $5 million in a series B round of funding 
from lead investor Echelon Ventures and SAIC Ven- 
ture Capital Corp. The company also announced a 
partnership with SAIC Corp., a systems integrator 
that generated $6 billion in revenues last year, 
according to SiteScape CEO Tim Butler. The partner- 
ship will help SiteScape close on projects it lost last 
year due to its small size, as well as provide a new 
customer base to sell into, Butler said . . . Sybase 
Inc. has acguired information component provider 
OnePage Inc. for an undisclosed sum. Sybase plans 
to incorporate OnePage's portlet technology into the 
Sybase Enterprise Portal product . . . Rational 
Software Inc. continued to see revenues decline, as 
it announced it took in $180.1 million for the fourth 
guarter ended March 31 and $689.8 million for the 
year, down from the $241.7 million and $814.9 million 
for the same periods last year. The net loss for the 
fourth quarter was $11.7 million, or 6 cents per share 
on a diluted basis, compared with net income of $6.6 
million and 3 cents per share for the same period last 
year. For the year, the company posted a net loss 
of $75.9 million as compared with net earnings of 
$72.1 million a year ago . . . Computer Associates 
International Inc. has settled a U.S. Department 
of Justice lawsuit over its May 1999 acquisition of 
Platinum Technology International, paying 
$638,000 — half of what was sought — to the gov- 
ernment but not having to admit any wrongdoing. 
The government alleged that CA violated antitrust 
laws by ending pricing discounts for Platinum prod- 
ucts before the end of the waiting period mandated 
by law. Also, the government charged that CA put an 
employee in Platinum's office to review and approve 
customer contracts during the waiting period. I 
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CALENDAR OF EVENTS 



Borland Conference 

Anaheim, Calif. 

BORLAND SOFTWARE CORP. 

www.borland.com/conf2002 



May 18-22 



NextWare Expo May 20-23 

Baltimore 

PENTON MEDIA INC. 
www.nextwareexpo.com/spring2002 

Invent 2002 May 28-31 

Las Vegas 

HEWLETT-PACKARD CO. 
www.sys-con.com/email/hpoptin.cfm 



Embedded 
Systems Conference 

Rosemont, III. 

CMP MEDIA LLC 

www.esconline.com/chicago 



June 3-6 



XML Web Services One June 4-7 

San Jose, Calif. 

101 COMMUNICATIONS LLC 

www.xmlconference.com/sanjose 

VBITS/VSLive June 16-19 

New York 

FAWCETTE TECHNICAL PUBLICATIONS 

www.vbits.net/2002/ny/default.asp 

Web Services/JDJ/ June 24-27 
XML Edge East 

New York 

SYS-CON EVENTS INC. 

www.sys-con.com/webservicesedge2002east 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 



You could buy our competitor's software development tools, 
but than you would have to use them* 
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Wiere is it written that a proQ*am has io t>e ftard to use just because you went to soeed up your software 
design end coHaoo'elive development efforrs? The -"act is r it doesn't. FmbarcBde r o's Peac-ribe"' gives you ell 
thfi banefita of The Uriflt ILJrifffed Modeling Lanrjuaoel witioLt having |o subject your team to some c-rmptex, 
overpriced and :atally inflexib e application development tool 

That shoylcf be huge r elie"'- After all r your tools should efiminatfi r:omple.xity, n^t^dd to it- Describe simplifies 
analysis, design and application implementation for nrgani7af"onn worfng w'th Java, C++ and PL, With features 
tha: include seamless integration with popular DEs like Sun" Forte"" far Java", Borland* JBui der^ and IBM 
WebSphere* Studio Applicalion Developer, real-time learn collaboration, ard nound-Uip EFtyUMl modelings 
Describe streamlines any design, development or application re-engineering effort without tore ng people to 
cnange the way Lhey like to work, 



Simple? really is batter., For mora iin^arniatEorc,, or to download 
;; "k:l v evaljal-cr my.- r \ *• :;il wwiV.embarcadETO.com locay. 




PMBARCAOFRO 

TECHNOLOGIES* 



RULES MAY GOVERN 

THE WORLD OF TECHNOLOGY 

BUT IMAGINATION 

WILL ALWAYS BE KING 





Put your imagirtanon m morion. The reYOSutiariary uirele&s platform BftEW enables <tevafopffir$ - 
p> even those wth no wireless experience - Go write applications and get them to market. No finding 

DTGW a randset partner. No gaining access to chip system software, BREW does It all. Download 

ci**m.,n is-w-u. » bt4ii»>.- the BREW SDK at htipi//brew.qualcOTim.eorrv2S07i. Wireless earners need apps. Start thinking. 
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Don't miss the BREW 2002 Developers Conference. Jure 3-5 in San Diego, CA. Register now; www.brew2D02.Gom 



